Privacy Policy

We collect information when you browse our website, create an account, place an order, request support, participate in promotions, or partner with E-One Trading. This includes:

• •Identity and contact details: full name, company name, email address, phone numbers, billing and delivery addresses, and national ID details when the law requires us to verify customers or recipients of alcoholic beverages.
• •Account information: username, encrypted passwords, preferences, saved carts, and communications history within your dashboard.
• •Transactional data: orders placed, payment confirmations, delivery instructions, invoices, refunds, warranty claims, and loyalty programme activity.
• •Technical and usage data: device identifiers, IP address, browser type, session logs, search queries, pages viewed, interaction with our emails, crash diagnostics, and approximate location derived from IP address.
• •Support and communications: recordings or transcripts of support calls, chat messages, emails, and documents you upload when you contact our team.
• •Partner and B2B information: business registration numbers, tax identification, distribution agreements, bank account confirmations, and signatory details supplied as part of partnership due diligence.

We do not intentionally collect sensitive personal data (such as health or religious information). If we ever need to process such data, we will obtain explicit consent or rely on a clear legal obligation.

We process personal data to deliver a reliable, secure, and personalised experience:

We only process personal data where we have a lawful basis under Ghana's Data Protection Act (Act 843), the EU GDPR (where applicable), or other local regulations:

• •Contractual necessity: to create and administer your account, process orders, arrange deliveries, and provide support.
• •Legitimate interests: securing our platform, understanding how it is used, improving services, and engaging in responsible marketing.
• •Legal obligations: complying with tax, anti-money laundering, product safety, and age-verification requirements.
• •Consent: sending promotional communications, activating analytics cookies, or onboarding you to partnership programmes.

Where we rely on consent, you can change your preference in the cookie banner or through the Cookie Settings link in our footer. You may also update your marketing choices in your account or by using the unsubscribe link in emails.

We do not sell personal information. We only share data with trusted parties who help us deliver our services or where we must do so by law:

We use cookies and similar technologies to keep our site secure, understand performance, and tailor content. Essential cookies load automatically because they keep the website running. Non-essential analytics cookies only load after you provide consent through our banner.

• •Strictly necessary: authentication, load balancing, security, and shopping cart functionality.
• •Performance and analytics: Google Analytics 4 (Measurement ID pending) and Vercel Web Analytics track page views, feature usage, and technical diagnostics so we can optimise your experience.
• •Preference cookies: remember your region, saved carts, and consent settings.

You can manage your choices at any time by selecting Cookie Settings in the footer, re-opening the on-site banner, or adjusting your browser preferences. Visit our Cookie Policy for a detailed breakdown.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

• •Account information is retained while your account remains active.
• •Transaction and financial records are stored for at least seven (7) years to meet tax and audit requirements.
• •Support tickets, call logs, and communication history are typically retained for up to three (3) years unless a longer period is required for dispute resolution.

We adopt technical and organisational controls such as encryption in transit and at rest, segregated environments, role-based access, routine security reviews, employee training, and incident response procedures. We host our application on secure infrastructure and partner with Supabase and Vercel, who maintain ISO 27001 and SOC-compliant environments.

E-One Trading operates from Ghana but uses global infrastructure. When we transfer data outside Ghana or the country where you access our services, we ensure appropriate safeguards are in place.

• •Supabase stores application data in secure data centres located within the European Union. Vercel hosts our web assets on distributed edge networks.
• •We rely on Standard Contractual Clauses, Data Processing Agreements, and other recognised safeguards to protect data during international transfers.

By using our services, you consent to the transfer of information to countries outside your location, provided the receiving organisation maintains adequate data protection standards.

You are in control of your information. Subject to legal limitations, you can exercise the following rights:

Submit rights requests by emailing privacy@eonetrading.com or by using the contact options below. We will verify your identity before completing your request and respond within 30 days (or as otherwise required by law).

Our services are designed for adults who are legally permitted to purchase the products we distribute. We do not knowingly collect information from individuals under the age of 18.

Parents or guardians who believe a minor has provided us with personal information should contact us immediately. We will promptly delete such data unless we are legally obliged to retain it (for example, to comply with a lawful request).

We review this policy regularly to ensure it reflects our operations, regulatory requirements, and industry best practice. When we make material changes, we will update the “Last updated” date, provide a notice on our website, and, where appropriate, notify you via email or in-app messaging.

If you are not satisfied with our response, you may escalate a complaint to the Data Protection Commission of Ghana or the relevant regulator in your jurisdiction.