Privacy Notice

Golden Route Shipping Proprietary Limited is the controller responsible for the personal information described here. Our address is Plot 17622, Tlokweng, Botswana. Privacy questions and requests may be sent to tumiebeautyjoy@gmail.com.

• Account and contact details, including your name, email address, profile photo, and WhatsApp number.
• Orders, pool participation, quantities, bookmarks, products you create, purchasing patterns, and service messages.
• Payment-confirmation information, including proof-of-payment files and payment references. We do not ask you to store card details in your profile.
• Account-security and technical information needed to authenticate users, prevent abuse, diagnose failures, and protect the service.
• Your privacy choices and the date and version of each consent or withdrawal.

We process information to create and secure accounts; operate pools; source, procure, coordinate, and support orders; communicate with you; keep transaction and compliance records; prevent fraud; improve service reliability; and respond to legal requests.

Depending on the activity, our basis is performance of our agreement with you, compliance with a legal duty, our legitimate interests in operating and securing the service, or your consent. Essential account and order processing is not conditional on optional marketing or insights consent.

This permission starts off. You may refuse it without losing any service and may withdraw it at any time in Profile. Withdrawal stops future use based on consent; it cannot retract an aggregate report that no longer identifies you and was lawfully produced before withdrawal.

Before launching any commercial-insights programme, we will complete the appropriate risk assessment, confirm safeguards and contracts, and update this notice where necessary.

Access is limited to authorised Golden Route personnel and service providers that help us run authentication and databases, host the site, store uploaded files, process or confirm payments, provide logistics, or support customers. Providers receive only the information needed for their role and must protect it. Regulators, courts, law enforcement, or professional advisers may receive information where lawfully required.

Commercial partners may receive only the aggregate reports described above and only where the relevant users opted in—never their underlying customer-level records.

Some technology, storage, supplier, and logistics providers operate outside Botswana. Where information crosses borders, we assess the transfer and use legally appropriate contractual, security, and access safeguards. Contact us if you want more information about safeguards relevant to your data.

We keep profile information while your account is active and then delete or anonymise it when it is no longer needed. Order, payment, tax, accounting, dispute, fraud-prevention, and consent records may be retained after account deletion for the period required by law or reasonably needed to establish or defend claims. We use retention criteria rather than keeping information indefinitely.

A deletion request does not cancel an active order. We first resolve the order and then delete direct identifiers or retain only the minimum record the law requires.

Subject to applicable exceptions, you may request access, correction, erasure, restriction, or portability; object to certain processing; withdraw consent; and complain to the Information and Data Protection Commission. We may need to verify your identity. We aim to respond within one month, or explain any lawful extension.

We use access controls, authenticated uploads, database rules, monitoring, and other proportionate measures to protect information. No online system is risk-free. If a breach creates a legally reportable risk, we will notify the regulator and affected people as required.

Accounts are intended for people aged 18 or older. We do not knowingly offer accounts to children. We do not currently make decisions with legal or similarly significant effects using solely automated profiling.

The service currently uses only storage and similar technology needed for authentication, security, session continuity, and saved preferences. We do not currently activate optional advertising cookies. If that changes, we will provide a separate choice before optional cookies run.

We may update this notice as the service or law changes. Material changes will be shown in the service and, where required, we will ask for a fresh choice. Previous consent is not treated as permission for a materially new purpose.