01 Introduction
MZ Shop ("MZ Shop," "we," "us," or "our") is an online shopping application developed and published by Castel Code Ltd, a software company based in Lusaka, Zambia. MZ Shop connects buyers and sellers, allowing users to browse products, place orders, and manage a storefront. This Privacy Policy describes how we handle information collected through the MZ Shop app and related services.
By creating an account, browsing listings, or making a purchase or sale on MZ Shop, you agree to the practices described in this Policy.
02 Information We Collect
We collect information you provide directly, information generated by your use of the app, and information from third parties:
- Account information — name, email address, phone number, and password when you register;
- Delivery information — shipping address, billing address, and delivery preferences;
- Order history — items purchased or sold, order status, returns, and reviews;
- Payment information — processed through secure third-party payment providers; MZ Shop does not store full card numbers;
- Browsing & search activity — products viewed, searched, wish-listed, or added to cart;
- Communications — messages exchanged between buyers and sellers, and correspondence with our support team;
- Device & technical data — IP address, device model, operating system, and app version, collected automatically.
03 How We Use Your Information
We use collected information to:
- Process and fulfil orders, including payment, delivery, and returns;
- Facilitate communication between buyers and sellers;
- Personalize product recommendations and search results based on your activity;
- Detect and prevent fraud, abuse, and policy violations;
- Send order confirmations, shipping updates, and — where you've opted in — promotional offers;
- Improve app performance, features, and customer support.
We do not sell your personal information to third parties for their own marketing purposes.
04 Orders & Payments
When you place an order, MZ Shop shares the minimum information necessary with payment processors (such as Flutterwave) to complete the transaction, and with logistics partners to arrange delivery. Sellers on MZ Shop receive the buyer information required to fulfil an order — such as delivery address and contact number — and are expected to use it only for that purpose.
05 Buyer & Seller Interactions
If you operate a storefront on MZ Shop, your business name, storefront details, product listings, and aggregated sales performance may be visible to buyers and, where relevant, to Castel Code for platform administration and dispute resolution. Buyer reviews and ratings you leave are visible publicly on the relevant product or seller page.
08 App Permissions
| Permission | Purpose |
|---|---|
| Camera | Uploading product photos when listing an item for sale |
| Storage / Photos | Selecting existing images for product listings or profile photos |
| Location (optional) | Estimating delivery times and showing nearby sellers, where enabled |
| Notifications | Order updates, delivery status, and promotional alerts (can be disabled in Settings) |
09 Data Storage & Security
We take reasonable technical and organizational measures to protect your information, including secured cloud infrastructure, encrypted connections, and restricted internal access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10 Data Retention
We retain account and order information for as long as your account remains active and for a reasonable period afterward to comply with tax, accounting, and dispute-resolution obligations. You may request deletion of your account as described in Section 11.
11 Your Rights
You may request access to, correction of, or deletion of your personal information held by MZ Shop, and may object to certain processing such as marketing communications. To exercise these rights, contact us using the details in Section 15.
12 Children's Privacy
MZ Shop is not directed at children under 13, and we do not knowingly collect personal information from children. Accounts found to belong to underage users may be suspended or removed.
13 International Data Transfers
Because MZ Shop uses cloud service providers such as Firebase and Google Cloud, information may be processed or stored on servers located outside Zambia. Where this occurs, we rely on the security and compliance safeguards provided by these established platforms.
14 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last updated" date.
15 Contact Us
If you have questions about this Privacy Policy or how MZ Shop handles your information, please reach out:
- Email: castelcode.tech@gmail.com
- WhatsApp: +260 760 951 176
- Website: castelcode.tech
- Location: Lusaka, Zambia