This policy explains what ShonaDirect does with the information a brand provides when it applies to distribute through the Shona retail network and when it uses the brand dashboard.
Who we are
ShonaDirect is a business to business distribution platform operated by Shona Prince Technologies.
Registered entity: [PLACEHOLDER: registered legal name and company registration number]. Registered address: [PLACEHOLDER: registered address]. Questions about this policy go to [PLACEHOLDER: privacy contact email].
What we collect
We collect what a brand gives us in order to apply and to operate on the platform.
- Company details: trading name, registered legal name, country of incorporation, registration number, website, product categories and brand description.
- Contact details for the people a brand nominates: name, work email address and phone number.
- Documents a brand uploads, such as a certificate of incorporation, tax certificate, export licence or product certifications.
- Banking and settlement details, used to pay settlements owed to the brand.
- Account and usage records: sign in times, actions taken in the dashboard, and technical logs needed to keep the service secure.
Why we use it
We use company and contact details to review an application and to operate a brand's account. We use documents to verify the brand. We use banking details only to pay settlements. We use account and technical records to keep the service available and secure, and to investigate problems.
Who we share it with
Information is shared inside Shona Prince Technologies with the people who review applications and operate distribution.
It is shared with service providers who host and run the platform on our behalf under contract: [PLACEHOLDER: list of processors, for example hosting, email delivery and error monitoring providers].
It is shared with regulators, customs authorities or clearing agents where that is required to import and distribute a brand's goods, or where the law requires it.
We do not sell personal information.
Where it is held
Platform data is held on [PLACEHOLDER: hosting regions]. Documents are stored in encrypted object storage. Where information moves between countries, we rely on [PLACEHOLDER: transfer mechanism].
How long we keep it
Application records and brand documents are kept for as long as the account is open and for [PLACEHOLDER: retention period] afterwards, or longer where tax, customs or company law requires it. Settlement and payment records are kept for [PLACEHOLDER: financial retention period].
Your rights
Depending on where you are, you may have the right to ask for a copy of your personal information, to correct it, to ask us to delete it, to object to some uses, and to complain to a supervisory authority.
To exercise any of these, write to [PLACEHOLDER: privacy contact email]. Data protection contact: [PLACEHOLDER: data protection officer or responsible person].
Security
Access to brand data is restricted to the people who need it. Sessions use encrypted connections, tokens are held in http only cookies, and administrative actions are recorded in an audit log.
If a breach affects your information we will notify you and the relevant authority as the law requires.
Cookies
The site uses cookies that are necessary for it to work: a session cookie that keeps you signed in and a preference cookie that remembers your light or dark theme. [PLACEHOLDER: confirm whether analytics cookies will be used, and add a consent notice if so.]
Changes to this policy
If this policy changes we will update the date at the top of this page and, where the change is significant, tell account holders by email.