Oletrak Privacy Policy

1. Introduction

Oletrak ("we", "us" or "our") operates the Oletrak marketplace. We are committed to protecting your privacy and handling your personal data responsibly, in line with the Data Protection Act, 2012 (Act 843) of Ghana and other applicable privacy laws. This Privacy Policy explains what information we collect, how we use it and the rights you have over it.

2. Information We Collect

Information you give us

• Account details: your name, email address, phone number, password (stored as a secure hash) and profile picture.
• Social sign-in: if you sign in with Google, we receive the verified email address and name associated with that account from the provider you choose.
• Listings: product, service, institution, room and job information you post, including images, descriptions, category, subcategory, condition, region, town/city, delivery options and pricing.
• Location data: the region and town/city you select when creating or editing a listing, used for location-based search filtering and price-band monitoring.
• Payout details: if you sell, your bank account or mobile-money details (account name, number, bank code) used to pay you out. This is required for Secure Buy and booking payouts.
• Messages & reviews: conversations with other users, comments, reviews and ratings.
• Reports & enquiries: content of reports, contact-form messages and support requests.
• Security data: two-factor authentication (2FA) secrets you enable and one-time codes sent to verify your email.
• Savings & rewards: items you save to your wishlist, coupon codes you create or redeem, and referral/wallet-credit records.
• Promotion memberships: where you join a payment-gated promotion or wholesale membership, the promo you joined, the amount you paid and the resulting membership status.

Information collected automatically

• Device & usage data: browser type, pages visited and actions taken, kept only when you have accepted optional analytics cookies.
• Technical data: IP address and basic request logs, used for security, rate limiting and fraud prevention.
• Human-verification data: when you complete the "I'm not a robot" check on sign-up, login, password reset or the contact form, Cloudflare Turnstile processes limited technical data (including your IP address) to decide whether you are human. We do not receive the raw widget data — only the verification result.
• Preferences: your cookie-consent choice, theme preference, display language/currency and digest preferences.
• Promotion activity: when a promotional banner or the hero slideshow is shown, we count an impression, and we count a click when you open the promotion. These counts are stored against the promotion as aggregate figures — they are not used to build a personal advertising profile of you.
• Seller analytics: for sellers, views, inquiries, saves, sales and ratings are aggregated per listing on your own dashboard and in the optional weekly analytics email.
• Push subscriptions: if you allow browser notifications, your browser gives us a push endpoint and encryption keys so the notification can be delivered. Unsubscribing in your browser invalidates them.

3. How We Use Your Information

• To operate the marketplace: host listings, process bookings and job applications, deliver messages and notifications;
• To process payments and payouts through our payment provider, Paystack;
• To moderate content, detect fraud, enforce our Terms of Service, and operate price-band monitoring (statistical outlier detection on listing prices per category);
• To send service communications (e.g. payment confirmations, verification codes, order updates, seller verification status);
• To send optional email digests, the weekly seller analytics report and browser push notifications only if you have chosen to receive them (manageable in Settings);
• To operate promotions and memberships: measure how promotions perform, keep a live count of joined members and remaining spots, and honour the benefits you paid for;
• To operate rewards: validate coupon codes at checkout and credit referral rewards to your wallet;
• To improve the platform, subject to your consent where required.

4. Payments and Paystack

Payments on Oletrak (Secure Buy purchases, booking deposits, boosts, job postings, promotional memberships and wholesale memberships) are processed by Paystack, a PCI-DSS compliant payment provider. Card numbers and mobile-money PINs are handled directly by Paystack and are never stored on Oletrak's servers. Paystack's privacy policy applies to how it processes payment data. Oletrak stores only payment references, amounts and statuses needed to manage Secure Buy, refunds and payouts.

5. How We Share Information

• With other users: when you buy or sell, the relevant counterparty sees your public profile name and the details needed to complete the deal (e.g. your delivery contact when arranging shipment).
• With service providers: Paystack (payments), Cloudflare Turnstile (human verification on forms), email delivery, browser push delivery, and hosting providers we rely on to run the platform. Each provider processes only the data needed for its service and under its own privacy terms.
• With delivery partners: when a seller dispatches an order by bus, ride-hail or Ghana Post, the recipient name, phone number and delivery address you provided are shared with that carrier so the item can reach you. We do not share payment details with carriers.
• With our staff: moderators and administrators access content and limited account data to review reports, resolve disputes and maintain safety.
• When required by law: we may disclose information to authorities where legally required or to protect rights and safety.

We never sell your personal data to third parties.

6. Cookies and Your Choices

Oletrak uses a small number of cookies and local storage:

• Strictly necessary: session cookies that keep you logged in, keep your cart, and secure your account. These are always on.
• Functional: your theme, display language, currency, recently viewed items and cookie-consent choice (the oletro_prefs cookie).
• Analytics / performance: page views, scroll depth and search queries used to understand how the site is used.
• Personalization: the "Made For You" recommendations and category interests we derive from your browsing.
• Third-party / marketing: advertising, retargeting and affiliate measurement pixels.

If you decline a category, we do not use it: no analytics or personalization cookie is set before you accept it, and the options you did not accept are left switched off. You can change your choices at any time through the consent banner or the "Cookie Settings" link in the footer, and you can clear cookies in your browser settings.

Promotions and Privacy

Promotional banners and the hero slideshow are part of the marketplace itself, so they are shown to everyone and their impression and click counts are aggregate figures stored against the promotion. We do not use them to target advertising at you based on your browsing. A promotion that is restricted to a region, category or user role is matched using the region, category or account status you have already given us, or that you selected while browsing.

7. Messages, Digests and Notifications

We send transactional emails you need to know about (verification codes, payment receipts, order updates, password resets). Optionally, you can enable daily or weekly digests summarising marketplace activity, the weekly seller analytics report, and browser push notifications for messages, orders and offers. Each of these is off until you switch it on, and you can change your mind at any time in Settings (and, for push, in your browser's notification settings).

8. Data Retention

• Account data: kept while your account is active, and for a reasonable period after deletion where required for legal or record-keeping reasons.
• Messages: retained until the platform's configured auto-delete window (if enabled) or your account deletion.
• Promotion and promotion-membership records: kept while the promotion and your membership are active, and afterwards as long as needed to support refunds, disputes and accounting.
• Coupons, referral and wallet records: kept for as long as the credit can be used and afterwards for accounting and fraud checks.
• Push subscriptions: deleted or invalidated as soon as you turn notifications off or your browser drops the subscription.
• Payout records: retained for financial record-keeping and tax compliance.
• Logs & security data: retained only as long as needed for the security purpose they serve.

9. How We Protect Your Data

• Passwords are stored as salted hashes — never in plain text;
• Optional two-factor authentication (2FA) protects your account;
• Session cookies are hardened and sessions are validated on sensitive actions;
• Rate limiting and IP checks slow brute-force and abuse attempts;
• Data is transmitted over encrypted connections (HTTPS) wherever supported;
• Cache and upload directories are web-blocked and validated.

No method of transmission or storage is 100% secure, but we apply reasonable technical and organisational measures to protect your data.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data (you can edit most of it in your profile settings);
• Delete your account and associated data;
• Withdraw consent for optional processing such as analytics or digests;
• Complain to the Data Protection Commission of Ghana (or your local supervisory authority) if you believe your data rights have been violated.

To exercise any of these rights, contact us at the details in Section 13. We respond within a reasonable time and in line with applicable law.

11. Children's Privacy

The platform is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page with its "Last updated" date. Material changes will be highlighted where practical.

13. Contact Us

Questions or requests about privacy? Contact us at support@oletrak.com or through the Contact Us page.