Privacy Policy

Patel Stores Ltd ("we", "our", or "us") operates three grocery retail locations in Kigali, Rwanda, along with an online ordering platform at patelstoresrw.com and the Patel Stores mobile application.

Our locations:

• Patel Supermarket — 6 KN 82 St, Kigali
• Patel Grocers — 46 KN 14 Ave, Kigali
• Patel Shop — 33GW+243, Kigali (Kicukiro)

This Privacy Policy applies to all services provided through our website and mobile app. By using our services, you agree to the practices described in this policy.

Information You Give Us

• Account details: your name, email address, and phone number when you register
• Delivery address: your physical address in Kigali for order delivery
• Order information: products you purchase, quantities, and order history
• OTP verification codes: temporary codes sent to verify your identity (never stored)

Information Collected Automatically

• Device type: whether you're using Android, iOS, or a browser
• App usage: which pages you visit and how you interact with the app
• Error logs: technical errors that help us fix problems

We use your information only to provide and improve our grocery delivery service:

• Process and fulfil your grocery orders
• Send order confirmations and delivery updates via email or SMS
• Verify your identity using OTP codes
• Allow our drivers to contact you for delivery
• Provide customer support when you contact us
• Improve our app and fix technical issues
• Send you order receipts and invoices

We will only send you promotional messages (like offers or new products) if you have opted in. You can unsubscribe at any time.

We do not sell, rent, or trade your personal data. We only share information in the following limited circumstances:

Our Delivery Drivers

Your name, phone number, and delivery address are shared with the assigned driver so they can deliver your order. This information is only visible during the active delivery and is not retained by the driver.

Service Providers

• Supabase (database hosting) — stores your account and order data securely
• Vercel (web hosting) — serves our website and app
• Email service — sends order confirmation emails on our behalf

Legal Requirements

We may disclose your information if required by Rwandan law, court order, or to protect the safety and rights of our customers and staff.

Patel Stores accepts payment via MTN Mobile Money, Airtel Money, and Cash on Delivery.

Payment transactions are processed directly by MTN Rwanda and Airtel Rwanda. We do not store your Mobile Money PIN, account credentials, or full transaction details. We only receive a confirmation of successful payment.

For cash on delivery, payment is handled in person by our driver and no financial data is stored digitally.

Your data is stored securely using Supabase, a cloud database service. We implement the following security measures:

• All data is transmitted over encrypted HTTPS connections
• Passwords are hashed and never stored in plain text
• OTP codes are temporary and expire within 5 minutes
• Access to the admin panel is restricted to authorized Patel Stores staff only
• Our database has row-level security policies restricting data access

How Long We Keep Your Data

• Active accounts: retained as long as your account is active
• Order history: retained for 3 years for accounting and dispute purposes
• Deleted accounts: all personal data is removed within 30 days of a deletion request

You have the following rights over your personal data:

• Access: request a copy of all data we hold about you
• Correction: ask us to correct any inaccurate information
• Deletion: request that we delete your account and all associated data
• Portability: receive your data in a readable format (CSV)
• Opt-out: unsubscribe from marketing messages at any time
• Restriction: ask us to stop processing your data in certain circumstances

To exercise any of these rights, contact us at patelgrocersrwanda@gmail.com. We will respond within 14 business days.

Patel Stores is a grocery shopping service intended for use by adults. We do not knowingly collect personal information from children under the age of 13.

If you believe a child under 13 has created an account without parental consent, please contact us immediately at patelgrocersrwanda@gmail.com and we will delete the account promptly.

We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users by email if the changes are material
• Display a notice in the app for 7 days after major updates

Your continued use of Patel Stores after any changes means you accept the updated policy. We encourage you to review this page periodically.