Privacy Policy

233shops (“we,” “us,” or “our”) is a platform operated by 233digital that enables Store Owners to sell data bundles, airtime, and results checkers to Buyers across Ghana.

This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our website, create an account, make a purchase, or interact with our services. It applies to all users — Buyers, Store Owners, and visitors alike.

By using 233shops, you consent to the practices described in this policy. If you do not agree, please do not use our services.

We collect different types of information depending on how you interact with 233shops:

Information you provide

Information collected automatically

We use the information we collect to:

• Provide our services — process orders, fulfill data/airtime/results checker deliveries, and manage your account.
• Process payments — securely handle transactions through Paystack and process Store Owner withdrawals.
• Communicate with you — send order confirmations, delivery updates, account notifications, and support responses.
• Improve the platform — analyze usage patterns, identify bugs, optimize performance, and develop new features.
• Prevent fraud — detect and prevent unauthorized transactions, abuse, and security threats.
• Legal compliance — meet regulatory requirements, respond to legal requests, and enforce our Terms of Service.

We do not sell your personal information to third parties. We do not use your data for targeted advertising or share it with data brokers.

We work with trusted third-party providers to operate 233shops. These providers access only the data necessary to perform their specific functions:

Each third-party provider is bound by their own privacy policy and data processing agreements. We encourage you to review their policies for more information on how they handle your data.

233shops uses cookies and similar technologies to provide, protect, and improve our services. Here is what we use:

Most browsers allow you to control cookies through their settings. Disabling essential cookies may prevent the platform from functioning properly.

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Encryption at rest: Sensitive data stored in our database is encrypted at rest using AES-256 encryption.
• Payment security: We never store full card details. All payment processing is handled by Paystack (PCI-DSS Level 1 compliant).
• Access controls: Internal access to user data is restricted to authorized personnel on a need-to-know basis.
• Password hashing: Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Regular monitoring: We actively monitor for security threats and unauthorized access attempts.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining robust protections.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

When data is no longer needed, it is securely deleted or anonymized so that it can no longer be associated with you.

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data, subject to legal retention requirements.
• Data portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of data processing where we rely on legitimate interest.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team. We will respond within 30 days and may require identity verification before processing your request.

233shops is not intended for children under the age of 18. We do not knowingly collect personal information from minors. If we discover that a child under 18 has provided us with personal information, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can take appropriate action.

233shops primarily operates in Ghana, but some of our third-party service providers (Supabase, Cloudflare, Google) may process data in servers located outside of Ghana.

When your data is transferred internationally, we ensure that appropriate safeguards are in place, including the use of providers who maintain robust security certifications and comply with international data protection standards.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the “Last updated” date at the top of this page.
• Where practical, we will notify you through the platform or via email.
• Continued use of 233shops after changes are published constitutes acceptance of the updated policy.

We encourage you to review this page periodically to stay informed about how we protect your data.