What we collect, what we don't,
and what you can ask us to do about it.

We only collect what we need to take your order, deliver your product, and answer your messages. Specifically:

• Account info you give us: name, email address, phone number, and the delivery address you enter at checkout or in your account page.
• Order info: the products you bought, amount paid, payment reference from Paystack or Stripe, shipping status, and any notes you left for the courier.
• Messages you send us: when you DM us on Facebook Messenger, Instagram, or WhatsApp, we receive the text of your message, your public profile name on that platform, and the platform's anonymous user ID (e.g. Instagram's scoped user ID — not your password or login). We use these to read your question, reply to it, and match your conversation to your customer record if you've bought from us before.
• Basic site analytics: we use Vercel's built-in analytics, which tells us things like which pages were visited and from which country. We do not run Google Analytics, Meta Pixel, or any third-party tracking cookies.

• We do not store your full payment card details. Paystack and Stripe handle payment; we only receive a reference number confirming the transaction.
• We do not buy or sell customer lists. Your data is yours.
• We do not use marketing pixels, retargeting, or third-party advertising trackers on the site.

• To take your order, charge you correctly, and get the product to your door.
• To answer your customer-service messages on whichever channel you reached us through.
• To send you transactional emails (order confirmations, shipping updates) — not marketing email.
• To improve the site, the product, and the messages we send — based on aggregated patterns, not on tracking individual customers.

When you message us on Facebook, Instagram, or WhatsApp, our customer-service inbox uses Anthropic's Claude to draft a suggested reply. The draft is reviewed by a human admin on our team before anything is sent back to you. The admin can edit, regenerate, or reject the draft.

Only your message text is sent to Anthropic. We do not send your phone number, email, payment info, or any other personal data along with the message. Anthropic processes the text to generate the draft and does not retain it for training. You can read Anthropic's privacy policy for details on their handling.

We work with a small number of trusted service providers to run the site and the business. We share only what each provider needs:

• Supabase — hosts our database (customer records, orders, message history). Located in the EU.
• Vercel — hosts the website and handles uptime / DDoS protection.
• Paystack (Ghana orders) and Stripe (international orders) — process card payments.
• Meta (Facebook, Instagram, WhatsApp) — delivers the messages you and we exchange on those platforms.
• Anthropic — generates the draft reply text that our admin then reviews (see section 04).
• Resend — sends our transactional emails (order confirmations, shipping notifications).
• Couriers and shipping partners who physically deliver your order — they receive name, phone, and address only.

We do not share data with anyone else for marketing, analytics, or any other purpose.

• Customer accounts: kept while your account is active. Delete your account anytime — see section 08.
• Order records: kept for seven years after the order, because Ghana tax and consumer law require us to.
• Message conversations: kept up to two years for customer-service continuity, then automatically deleted unless you've asked us to keep them longer (e.g. for an open complaint).
• Site analytics: aggregated and retained indefinitely; never tied to identified individuals.

You can ask us at any time to:

• See a copy of the data we hold about you.
• Correct anything that's wrong.
• Delete your data — see the data-deletion page for the exact steps.
• Object to specific uses (e.g. you'd like us to stop sending you transactional emails after we've delivered your last order).
• Take your data with you in a portable format.

Under Ghana's Data Protection Act (2012), you also have the right to lodge a complaint with the Data Protection Commission of Ghana if you think we've mishandled your data.

The site is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe we've inadvertently received a child's data, email hello@sheabuttercentral.com and we'll delete it.

We use only the cookies needed to keep you signed in and to remember what's in your cart. No advertising cookies, no third-party trackers. You can clear or block these cookies in your browser — you may have to sign in again or rebuild your cart afterwards.

Data is stored on Supabase's encrypted infrastructure and transmitted over HTTPS. Access to the admin dashboard is restricted to named team members and protected by Supabase authentication and row-level security. We don't store passwords in plaintext.

If we change anything material — what we collect, how we use it, who we share it with — we'll update this page and bump the "last updated" date at the top. If the change affects you specifically (e.g. a new partner gets access to your data), we'll email you before it takes effect.

Questions, requests, or complaints — email hello@sheabuttercentral.com or WhatsApp +233 24 872 9630.

Postal address: Shea Butter Central Ghana Limited, Accra, Ghana. The data controller is Christopher Tetteh.