Privacy Policy for Mustefamarket
Effective Date: [September 28, 2025]
1. Introduction
This Privacy Policy explains how MustefaMarket (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our website, https://mustefamarket.com (the “Website”). We are committed to protecting your privacy and handling your data in an open and transparent manner. As a business operating in compliance with the European Union’s General Data Protection Regulation (GDPR), we act as the Data Controller for the personal data we collect.
2. Data Controller
The data controller responsible for the processing of your personal data is:
Mustefamarket :-East Harerghe ,Maya City Your Contact Email: support@mustefamarket.com or abdurehmanmustefa71@gmail.com
3. Data We Collect (Categories of Personal Data)
We collect personal data to process your orders, provide our services, and improve your user experience. The personal data we collect falls into the following categories:
| Category | Examples of Data Collected | Purpose/Legal Basis (GDPR) |
| Identity Data | Name (Mustefa Abdurehman), User Name. | Contract: Necessary to process and fulfill your order. |
| Contact Data | Email Address abdurehmanmustefa71@gmail.com, Phone Number0939010938, Delivery Address (including East harerghe, Maya City, Oromia in Ethiopia). | Contract: Essential for order confirmation, delivery, and communication. |
| Financial Data | Payment transaction reference numbers, Payment method used (but NOT full credit card details, as payment is handled by secure third-party processors). | Contract & Legal Obligation: Required for transaction fulfillment and tax records. |
| Technical Data | IP Address, login data, browser type and version, time zone setting, operating system. | Legitimate Interest: Necessary for network security, troubleshooting, and improving website performance. |
| Usage Data | Information about how you use our website, pages viewed, time spent, clickstream data. | Legitimate Interest & Consent (for non-essential tracking): Used for analytics and site improvement. |
| Marketing Data | Your preferences in receiving marketing/newsletter communications from us. | Consent: Provided when you opt-in to our subscription service. |
Export to Sheets
4. How We Collect Your Data
We collect data in the following ways:
- Direct Interaction: When you create an account, place an order, contact us via email or phone, subscribe to our newsletter, or fill out a form.
- Automated Technologies (Cookies): As you interact with our website, we automatically collect Technical and Usage Data through cookies and similar technologies.
- Third Parties: We may receive data from analytics providers (e.g., Google Analytics) or our logistics p]artners, consistent with their respective privacy policies.
5. How We Use Your Data (Purposes of Processing)
We only use your personal data when the law allows us to. Most commonly, we use your personal data for the following purposes and corresponding legal bases:
| Purpose of Use | Legal Basis for Processing (GDPR Article 6) |
| To Fulfill Orders | Performance of a Contract (to deliver the products you ordered). |
| To Manage Your Account | Performance of a Contract (to provide you with account services). |
| To Communicate | Legitimate Interest (to respond to inquiries, confirm orders, and provide delivery updates). |
| Marketing | Consent (where you explicitly opt-in to receive our newsletter). |
| Website Security & Improvement | Legitimate Interest (to keep our website safe and continually enhance user experience). |
| Regulatory Compliance | Legal Obligation (to comply with applicable laws regarding taxes and consumer protection). |
Export to Sheets
6. Data Sharing and Disclosure
We only share your data with the following third parties when necessary and under strict confidentiality agreements:
- Logistics and Shipping Partners: Local and international shipping companies necessary to handle customs and final delivery of your Amazon products in Ethiopia.
- Payment Processors: Secure third-party payment gateways (e.g., local banks, mobile money providers) to process your transactions.
- IT Service Providers: Companies that provide us with website hosting, analytics, and maintenance.
- Legal/Regulatory Bodies: Where required by law, we may disclose your data to governmental agencies or regulators.
We do not sell or rent your personal data to any third party for marketing purposes.
7. International Data Transfers
As our service involves accessing and shipping products from Amazon (a non-EU entity) and operating within Ethiopia (a non-EU jurisdiction), your data will be transferred and processed outside of the European Economic Area (EEA).
We ensure your data is treated securely and in compliance with GDPR by implementing safeguards such as Standard Contractual Clauses (SCCs) or ensuring the recipient country is deemed adequate by the European Commission, where applicable.
8. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. This includes SSL encryption, secure server hosting, and restricted access to sensitive customer data.
9. Your GDPR Data Protection Rights
Under GDPR, you have the right to:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data we hold about you.
- Right to Erasure (Right to be Forgotten): Request that we delete your personal data under certain conditions (e.g., if the data is no longer necessary for the purpose for which it was collected).
- Right to Restrict Processing: Request us to limit the way we use your personal data.
- Right to Data Portability: Request that we transfer your data directly to another organization in a structured, commonly used, and machine-readable format.
- Right to Object: Object to our processing of your personal data, particularly where we rely on legitimate interest.
- Right to Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your personal data (e.g., for marketing).
To exercise any of these rights, please contact us at [Your Contact Email: abdurehmanmustefa71@gmail.com support@mustefamarket.com].
10. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order information is retained for [Six Years, e.g., seven years] after the transaction date to comply with local tax and accounting laws.
11. Changes to This Privacy Policy
We may update this policy from time to time. The latest version will always be posted on our website with the updated “Effective Date.” We encourage you to review this policy periodically.
Disclaimer: This content is for informational and drafting purposes only. You must consult with a legal professional to ensure your final Privacy Policy fully complies with the GDPR, Ethiopian laws, and the specific operations of your business.