Privacy notice

We collect the least we can get away with: enough to find your room, call you when the rider is outside, and prove what you bought. This page says exactly what that means.

Last updated 1 July 2026.

Who we are

CampusMart, at Ground floor, Student Union Building, Main Campus, is the data controller for the personal information described here. That means we decide what is collected and what happens to it, and we are the people you complain to if you are unhappy with it.

This notice covers this website, the orders placed through it, and the till at our counter.

What we collect

When you place an order

Your name.
Your phone number — the rider calls it, and it is how you track the order.
Your email address, where you give one, for the receipt and replies.
Your delivery location: for campus orders the hostel name and room number; for off-campus orders the street address and a landmark. We also record the delivery zone so the fee can be calculated.
The items, quantities and totals of the order, and any note you leave.
The payment method and payment status.

When you create an account

The same contact and location details, saved so you do not retype them.
A hashed password. We never store the password itself and cannot read it.
Your wishlist, basket contents and review history.

When you message us or leave a review

Your name, email, optional phone number and whatever you write to us.
Reviews are published with your display name next to the product.

Automatically, as you browse

A session identifier so your basket survives page loads.
Your IP address, recorded with sign-in attempts and order-tracking attempts to stop brute-force guessing.
Basic activity logs for admin actions, used to investigate mistakes and misuse.

We do not collect card numbers, PINs or Mobile Money credentials. We do not buy data about you from anyone, and we do not run advertising trackers on this site.

Why we collect it

To fulfil your order — pick it, price the delivery, find you and hand it over. Without your phone number and location we cannot deliver.
To let you track an order — the order number plus your phone number is what unlocks the tracking page.
To take payment and to prove what was paid, in cash or online.
To support you — answering messages, handling returns and refunds.
To keep records we are required to keep as a trading business, such as sales history.
To protect the shop and your account — throttling repeated failed sign-ins and repeated failed order lookups.
To improve what we stock, using aggregate sales figures rather than individual behaviour.

The legal basis for most of this is performing the contract you entered into when you ordered; for security logging and record-keeping it is our legitimate interest in running a safe, accountable shop.

How it is stored and secured

Your data lives in this application's own database on the server that runs the site. It is not copied into spreadsheets, personal phones or messaging groups.

Passwords are stored as one-way hashes, never in readable form.
Session cookies are HTTP-only, restricted to this site, and expire after a period of inactivity.
Every form that changes data is protected by a CSRF token, and all database access uses parameterised queries.
Admin, point-of-sale and developer areas are role-restricted, and privileged actions are written to an audit log.
Failed sign-in and order-lookup attempts are rate-limited by identifier and IP address.
Only staff who need it — for picking, delivering or supporting your order — can see your details.

No system is perfectly secure. If a breach ever affected your personal data, we would tell the people affected promptly and explain what happened and what to do.

Cookies and sessions

We use a small number of strictly necessary cookies and similar storage:

A session cookie that identifies your browsing session. It keeps you signed in and keeps your basket attached to you before you have an account.
A remember-me token, only if you tick "keep me signed in", so you do not have to sign in on every visit. Signing out removes it.
A local preference for light or dark mode, stored in your browser and never sent to us.

None of these are advertising or analytics cookies. Blocking them in your browser will break the basket and sign-in, because they are what makes those features work.

How long we keep it

Order records — kept for six years, which is the period we need them for accounting and dispute purposes.
Account details — kept while your account is open. Close it and we delete or anonymise the profile, keeping only the order records above.
Contact messages — kept for up to two years so we have the history of a complaint or request.
Sign-in and tracking attempt logs — kept briefly, only long enough for the rate-limit window to do its job.
Baskets that were never checked out — cleared periodically.

Your rights

You can ask us to:

Show you the personal data we hold about you.
Correct anything wrong — you can fix most of it yourself in Profile & address.
Delete your account and the data that is not tied to a completed sale.
Stop using your data for anything that is not needed to complete an order.
Export your order history in a readable form.

Ask through the contact form or email hello@campusmart.test. We will respond within 30 days. We may ask you to confirm your identity first — usually by confirming a recent order — so that nobody else can request your data.

If you are not satisfied with how we have handled a request, you can complain to the Data Protection Commission of Ghana.

Children

This shop is intended for adults and for students at the institutions we serve. We do not knowingly create accounts for children under 16. If you believe a child has given us personal data, tell us and we will remove it.

Changes to this notice

We update this notice when what we do with data changes — for example if we switch on a new payment provider or add a delivery partner. The date at the top always reflects the current version, and material changes will be flagged on the site.

Contacting us

For any privacy question, request or complaint:

Email: hello@campusmart.test
Phone: 0244000111
In person: Ground floor, Student Union Building, Main Campus
Online: the contact form