Privacy Policy

This notice will explain what personal data AfroYege collects, why, and what you can do about it.

What we actually collect today

This list is accurate — it is drawn from the live data model — even though the legal wording around it is still being written.

• Everyone: name, email address, phone number, home address and postcode.
• Date of birth, where you provide it. Required for runners, who must be 18 or over.
• Customers: order history, allergy notes, and messages exchanged with your runner.
• Runners: identity document, a selfie holding it, proof of address, bank details for payment, and any credentials you upload — DBS check, food hygiene certificate, vehicle insurance.
• Runners: a short bio and availability preferences shown to customers.
• Photographs taken during an errand: baskets, receipts and store fronts.

What the final version must add

• The lawful basis for each category above, and how long each is kept.
• Who else sees it — payment processor, SMS provider, email provider, address lookup provider.
• How to exercise your rights: access, correction, erasure, portability, objection.
• Whether any data leaves the UK, and on what safeguards.
• Our ICO registration details and how to complain to the ICO.

Erasure

You can ask us to delete your personal data. When we do, your account is anonymised rather than removed outright: order and payment records are kept for accounting purposes, but they stop being linked to anything identifying you, and uploaded documents are deleted from storage.