🔒 Confidentiality & Data Privacy Policy

🗓️ Effective Date: July 14, 2025
Last Updated: July 14, 2025

Welcome to Arifnigd, the e-commerce platform powered by Arifpay Financial Technologies S.C. (“Arifpay,” “we,” “us,” or “our”). This Confidentiality & Data Privacy Policy explains how we collect, use, protect, and share personal data on Arifnigd (“Platform” or “Service”), in compliance with Ethiopia’s Personal Data Protection Legal framework and general standards.

By using Arifnigd, you agree to the terms of this Privacy Policy.

📋 1. What Data We Collect

We collect and process the following categories of personal data:

👤 1.1 Personal Identification Data

• Full name
• Phone number
• Email address
• Account credentials
• Business information (for merchants)

💳 1.2 Financial & Transactional Data

• Billing information and payment method
• Transaction history and orders
• Bank or wallet information (for settlement purposes)

🏪 1.3 Store and Customer Data (for Merchants)

• Store name, domain, products, and settings
• Customer information (e.g., name, address, email, phone, and order history)

💻 1.4 Technical & Usage Data

• IP address
• Device and browser type
• Usage logs and cookies
• Login timestamps and access location

⚖️ 2. Lawful Basis for Processing

We process your personal data under one or more of the following legal bases:

• Your consent (explicit or implied through use)
• Contractual necessity for providing services you request
• Legal obligation under financial, tax, or data protection laws
• Our legitimate interest to maintain platform security, usability, and fraud prevention

You have the right to withdraw your consent at any time.

⚙️ 3. How We Use Your Data

🛒 3.1 Platform Services

• Account registration, login, and store management
• Product listing, checkout, and delivery fulfillment
• Settlement of payments and order confirmation

🔧 3.2 Platform Maintenance & Development

• Enhancing service performance and reliability
• Bug detection and troubleshooting
• User feedback and analytics

🛡️ 3.3 Legal & Compliance

• Identity verification and fraud monitoring
• KYC and due diligence for merchants
• Compliance with legal, regulatory, and tax obligations

📬 3.4 Communication

• Transactional emails, alerts, and system updates
• Customer support and feedback responses
• Policy or terms changes notifications

📤 4. Data Sharing and Disclosure

🤝 4.1 With Service Providers

• Payment processors, banks, and telecom wallet providers
• Cloud hosting, analytics, and fraud monitoring vendors

All are contractually bound to data confidentiality.

🏛️ 4.2 With Regulatory Authorities

Where required by law, court order, or lawful request for investigation of fraud, money laundering, or illicit activity.

🚚 4.3 With Business Partners (where applicable)

Fulfillment partners, logistics providers, and delivery agents.

📦 4.4 With Customers (for Merchants only)

Merchant contact and store details may be shared with customers for delivery and service inquiries.

🔐 5. Data Security

• TLS/SSL encryption for data in transit
• Password hashing and secure authentication
• Role-based access control and audit logs
• Regular system security reviews and backups

🗑️ 6. Data Retention and Deletion

We retain personal data only for as long as necessary:

• To fulfill contractual obligations
• To comply with legal and regulatory requirements
• For dispute resolution or enforcement of agreements

Deletion Requests: You may request deletion of your personal data via info@arifpay.net. If deletion is restricted by law (e.g., tax audit requirements), we will anonymize the data where possible.

📄 7. Data Subject Rights

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data (subject to legal limits)
• Right to object to certain processing activities
• Right to data portability in a machine-readable format
• Right to lodge a complaint with the Ethiopian Personal Data Protection Commission

🍪 8. Cookies and Tracking Technologies

We may use cookies to improve your browsing experience, enable login sessions, measure traffic, and serve tailored content. You can manage cookie preferences through your browser settings.

🌍 9. Cross-border Data Transfers

Where personal data is stored or processed outside Ethiopia, we ensure appropriate safeguards such as:

• Hosting in countries with adequate protection standards
• Standard contractual clauses or equivalent legal mechanisms

🤫 10. Confidentiality Obligations

All Arifpay employees, contractors, and partners who access personal data are bound by strict confidentiality agreements. Unauthorized access, sharing, or misuse of personal data is strictly prohibited and subject to disciplinary and legal action.

🚨 11. Data Breach Notification

In the event of a data breach likely to affect your rights or freedoms, we will:

• Notify you within 72 hours of becoming aware of the breach
• Inform the concerned authority as required
• Take immediate remedial and mitigation actions

🔁 12. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes via email or platform notice and update the “Effective Date” above. Continued use of Arifnigd after such notice constitutes your acceptance of the changes.

📞 13. Contact Us

Arifpay Financial Technologies S.C.
Customer Service: 9395
Email: info@arifpay.net
Website: https://arifnigd.com