Privacy Policy — Duka360

Last updated: March 6, 2026
Version: 1.0

Preamble

This Privacy Policy describes how Duka360 (hereinafter "we", "our" or "the Company") collects, uses, stores and protects the personal data of users of the platform available at https://duka360.africa (hereinafter "the Platform").

Duka360 is an all-in-one business management software for merchants, SMEs, large companies and resellers in Africa.

We are committed to protecting our users' privacy in accordance with:

• Cameroonian law No. 2010/012 of December 21, 2010 on cybersecurity and cybercrime;
• Law No. 2010/021 of December 21, 2010 governing electronic commerce in Cameroon;
• International best practices for personal data protection, in particular the European Union's General Data Protection Regulation (GDPR), applicable to any processing concerning European residents.

By using the Platform, you accept the terms of this Privacy Policy. If you do not accept these terms, please do not use our services.

1. Who are we?

Data controller:

• Company name: Duka360
• Website: https://duka360.africa
• Address: Yaoundé - Cameroon
• Contact email: [email protected]
• Phone: 690253422

For any question regarding the protection of your personal data, you can contact our team at [email protected].

2. Data we collect

We collect different categories of data depending on your use of the Platform.

2.1 Identification and contact data

When creating your account or using our services, we collect:

• First and last name of the account holder and associated users
• Professional or personal email address
• Phone number (landline or mobile, including for Mobile Money integrations)
• Business or company name
• Role or function within the organization (manager, cashier, accountant, etc.)

2.2 Business and operational data

As part of using the management software, we process:

• Sales data: transactions made, amounts, products sold, dates and times
• Stock data: inventory, stock movements, stock-out alerts, suppliers
• Your business's customer data: names, contact details and purchase history of your own customers (data you remain the owner and controller of)
• Invoicing data: quotes, invoices, credit notes generated via the Platform
• Accounting data: expenses, profits, financial reports

Important: The business data (sales, stock, customers) that you enter into Duka360 remains your property. We act as a data processor for this data. You are the data controller with respect to your own customers.

2.3 Payment data (Duka360 subscription)

For subscribing to and paying for your Duka360 subscription:

• Mobile Money payment information (MTN Mobile Money, Orange Money): phone number associated with the Mobile Money account, transaction reference
• Bank transaction reference where applicable
• History of your Duka360 subscriptions and invoices

We never store your PIN codes, passwords or complete banking details. Payments are processed by certified and secure payment providers.

2.4 Technical and browsing data

When you connect to the Platform, we automatically collect:

• IP address and approximate geolocation data
• Device type, operating system and browser
• Connection logs: dates, times, session duration
• Usage data: features used, frequency of use, technical errors
• Cookies and similar technologies (see section 9)

3. Purposes and legal bases of processing

4. Data sharing and recipients

We never sell your personal data to third parties.

We may share your data only in the following cases:

4.1 Service providers (processors)

We use carefully selected technical providers for:

• Cloud hosting and infrastructure (servers and databases)
• Mobile Money payment providers (MTN, Orange) for processing your subscriptions
• Transactional email service (account confirmations, alerts)
• Platform analytics and performance tools

These providers act only on our instructions and are contractually required to protect your data.

4.2 Legal obligations

We may disclose your data if required by law, in particular in response to:

• A court decision or legal order
• A request from a competent Cameroonian government or regulatory authority
• The protection of our legal rights or the safety of our users

4.3 Business transfer

In the event of a merger, acquisition or total or partial transfer of Duka360, your data may be transferred to the new entity. You will be informed beforehand.

5. International data transfers

Duka360 operates primarily from Cameroon. Some of our technical providers may be located outside Cameroon (particularly in Europe or the United States).

In this case, we ensure that these transfers are governed by appropriate safeguards, in accordance with applicable laws, such as standard contractual clauses or other recognized mechanisms.

6. Data retention period

We retain your personal data only for as long as necessary for the purposes for which it was collected:

Once these periods expire, your data is irreversibly deleted or anonymized.

7. Data security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure:

• Data encryption in transit (HTTPS/TLS protocol) and at rest
• Secure authentication with encrypted passwords
• Strict access control: each user only accesses their organization's data
• Regular backups and an incident recovery plan
• Continuous monitoring of our systems to detect anomalies
• Training our team on security best practices

In the event of a data breach likely to affect your rights, we commit to informing you as soon as possible in accordance with applicable regulations.

8. Your rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

8.1 Right of access

You can request a copy of all personal data we hold about you.

8.2 Right to rectification

You can request the correction of any inaccurate or incomplete data about you.

8.3 Right to erasure

You can request the deletion of your data under certain circumstances (closed account, unnecessary data, withdrawal of consent), subject to our legal retention obligations.

8.4 Right to data portability

You can request to receive your business data (sales, stock, customers) in a structured, machine-readable format (CSV, JSON) in order to transfer it to another service.

8.5 Right to object

You can object at any time to the processing of your data for prospecting or marketing purposes.

8.6 Right to restriction of processing

You can request the temporary suspension of the processing of your data in certain cases.

8.7 Withdrawal of consent

Where processing is based on your consent (marketing communications), you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, contact us at: [email protected]

We commit to responding to any request within 30 business days.

9. Cookies and tracking technologies

9.1 What is a cookie?

A cookie is a small text file placed on your device when you visit our Platform. It allows us to recognize your browser and remember certain information.

9.2 Types of cookies used

9.3 Cookie management

You can configure your browser at any time to refuse cookies or be alerted when a cookie is placed. Note that refusing certain essential cookies may affect how the Platform works.

10. Data of minors

The Duka360 Platform is intended exclusively for professional and business use. We do not knowingly collect personal data concerning persons under 18 years of age. If you are a parent or legal guardian and believe your child has provided us with data, contact us immediately at [email protected].

11. Specific responsibilities of business users

As a business user of Duka360, you are the data controller for the data of your own customers that you enter into the Platform.

As such, you agree to:

• Inform your own customers about the collection and processing of their data
• Obtain the necessary consents in accordance with applicable regulations
• Not enter into Duka360 any sensitive data not necessary for business management
• Respect the rights of your customers regarding their personal data

Duka360 acts as a data processor for this data and processes it only according to your instructions and in accordance with this Policy.

12. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, regulatory developments or improvements to our services.

In the event of a substantial change, we will inform you:

• By email to the address associated with your account
• Through a notice visible on the Platform
• By updating the "Last updated" date at the top of this document

Your continued use of the Platform after notification constitutes acceptance of the changes.

13. Contact and complaints

For any question, request or complaint regarding the protection of your data:

• Email: [email protected]
• Postal address: Yaoundé - Cameroon
• Phone: 690253422

If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the competent data protection authority in your country of residence.

14. Applicable law and jurisdiction

This Privacy Policy is governed by Cameroonian law. In the event of a dispute regarding the interpretation or performance of this Policy, the parties agree to seek an amicable solution before any legal action. Failing an amicable agreement, the competent courts of Yaoundé, Cameroon shall have sole jurisdiction.

Duka360 — All your business on one platform
https://duka360.africa
© 2026 Duka360. All rights reserved.