AZE FARMS — Privacy Policy
Platform: Aze Farms (Aze Farms Client App · Aze Pro Seller App · Aze Delivery Courier App)
Operator / Data Controller: Aze Ventures LTD, Republic of Cameroon
Trade Register: [TO BE COMPLETED]
NIU: [TO BE COMPLETED]
Registered address: [TO BE COMPLETED], Republic of Cameroon
Website: www.azefarms.com
Effective Date: 24 June 2026
Version: 1.0
Table of Contents
- Introduction and Legal Basis
- Identity of the Data Controller
- Scope of the Policy
- Categories of Personal Data Collected
- Purposes of Data Processing
- Legal Bases for Processing
- Delivery and Location Data
- Payment and Financial Data
- Access to Messages, Claims and Support Data
- Data Sharing and Third Parties
- Technical and Organizational Security Measures
- Data Retention
- Account Deletion and Data Erasure
- User Rights
- Cookies, Device Data and Tracking Technologies
- Cross-Border Data Transfers
- Minors
- Data Relating to Claims, Penalties and Contestations
- Data Minimization and Role-Based Access
- Amendments to this Privacy Policy
- Contact and Complaints
Article 1 — Introduction and Legal Basis
Aze Ventures LTD, operator of the Aze Farms platform, is committed to the protection of the personal data of all Users of the Platform. This Privacy Policy explains how Aze Ventures LTD collects, uses, stores, shares, protects and deletes personal data within the Aze Farms ecosystem, including the Client application, Aze Pro Seller/Farmer application, Aze Delivery Courier application, website, administrator dashboard and support services.
Because the Platform connects Clients, Sellers/Farmers and Couriers across an integrated marketplace and delivery system, the data processed includes account data, KYC documents, product and stock data, order data, GPS and delivery data, payment data, communication data, claim data and administrative logs.
This Privacy Policy has been drafted in compliance with the following laws and regulations of the Republic of Cameroon:
- Law No. 2024/017 of 23 December 2024 relating to Personal Data Protection in Cameroon (the "Data Protection Act"), enforceable from 23 June 2026;
- Law No. 2010/012 of 21 December 2010 on Cybersecurity and Cybercrime in Cameroon;
- Law No. 2010/013 of 21 December 2010 regulating Electronic Communications in Cameroon;
- Law No. 2010/021 of 21 December 2010 regulating Electronic Commerce in Cameroon;
- Law No. 2011/012 of 06 May 2011 on Consumer Protection in Cameroon;
- Law No. 2003/004 of 21 April 2003 on Banking Secrecy;
- The Cameroonian Penal Code (Law No. 65/LF/24 as amended), applicable to data-related offences;
- The Constitution of the Republic of Cameroon, which enshrines the right to privacy in its Preamble.
Important: The Data Protection Act (Law No. 2024/017) was enacted on 23 December 2024 and is enforceable from 23 June 2026. Aze Ventures LTD is committed to full compliance with this law and with regulations issued by the Personal Data Protection Authority (Autorité de Protection des Données à Caractère Personnel — APDCP) as they are published.
Article 2 — Identity of the Data Controller
| Legal name | Aze Ventures LTD |
| Platform name | Aze Farms |
| Trade Register | [TO BE COMPLETED] |
| NIU | [TO BE COMPLETED] |
| Share capital | [TO BE COMPLETED] |
| Registered address | [TO BE COMPLETED], Republic of Cameroon |
| Website | www.azefarms.com |
| Privacy contact | privacy@azefarms.com |
| General support | support@azefarms.com |
| Data Protection Officer (DPO) | [TO BE APPOINTED — to be notified to the APDCP as required by Law No. 2024/017] |
Article 3 — Scope of the Policy
This Privacy Policy applies to all Users of the Aze Farms ecosystem, including Clients, Sellers/Farmers, Couriers and any person interacting with the Platform. It applies whether the User accesses Aze Farms through the Client app, Aze Pro, Aze Delivery, the website, the administrator platform, customer support or any related digital service.
Each User is concerned by the data processing related to their specific role. A Client does not provide the same data as a Seller/Farmer or Courier. However, the same Privacy Policy governs the entire ecosystem to maintain consistent protection and transparency across all three applications.
Article 4 — Categories of Personal Data Collected
4.1 Data Collected from Clients
| Category | Examples |
|---|---|
| Identity and account data | Name, username, email address, phone number, profile photo, language preferences, account status. |
| Authentication data | Encrypted password, OTP validation data, Google OAuth data, session tokens, device identifiers. |
| Delivery data | Saved addresses, GPS location where enabled, delivery instructions, contact number, delivery availability. |
| Shopping and order data | Products viewed, searches, categories, baskets, orders, quantities, sellers selected, order statuses, order history. |
| Payment data | Delivery fees paid in-app, product amount due at delivery, payment method selected, payment status, receipts, transaction references. |
| Communication data | Messages, support requests, notifications, claims and attached evidence such as photos or videos. |
| Review data | Ratings, reviews and feedback about Sellers, products, Couriers or the Platform. |
4.2 Data Collected from Sellers / Farmers
| Category | Examples |
|---|---|
| Identity and KYC data | Full name, CNI or equivalent identity document (front and back), selfie holding the document, phone number, profile photo. |
| Business or farm data | Store name, farm name, category, description, activity type, location plan, address, city, operating area, business licences. |
| Product data | Product names, categories, prices, units, photos, descriptions, stock levels, availability status, product updates. |
| Order and fulfilment data | Orders received, sub-orders, preparation status, handover status, cancellations, delays, Seller notes. |
| Financial data | Product amounts, commission deductions, available balance, withdrawal requests, Orange Money payout account, payment history, deductions. |
| Quality and dispute data | Client claims, product issue reports, evidence submitted, penalties, contestations, ratings, moderation records. |
4.3 Data Collected from Couriers
| Category | Examples |
|---|---|
| Identity and KYC data | Full name, CNI or equivalent identity document (front and back), selfie holding the document, phone number, profile photo. |
| Driving and vehicle data | Driving licence (front and back), vehicle type, vehicle photo, plate number, registration card, insurance, operating city, delivery zone. |
| GPS and mission data | Online/offline status, current position while online or on mission, pickup route, delivery route, timestamps, accepted and declined missions, mission history. |
| Delivery confirmation data | Pickup validation, OTP, QR scan, delivery status, payment confirmation, proof of delivery, incident reports. |
| Financial data | Delivery fees earned (80% share), product amounts collected on behalf of Aze Ventures LTD, remittance records, payout account, available balance, withdrawals, deductions, penalties. |
| Performance data | Delivery volume, ratings, delays, claims, cancellations, safety reports, account restrictions. |
4.4 Data Generated by Platform Activity
| Activity Source | Generated Data |
|---|---|
| Search and browsing | Categories viewed, products viewed, filters used, sellers opened, frequency of visits. |
| Ordering | Basket creation, order confirmation, sub-order splitting, seller preparation, courier assignment, status changes, cancellation history. |
| Delivery | Pickup timestamps, GPS route, delivery attempt, delivery confirmation, Client absence, proof of delivery, incident logs. |
| Payments | Delivery fee payment, product amount collected, payment at delivery status, commission, payout and reconciliation records. |
| Support and disputes | Claims, photos, videos, messages, administrative decisions, penalties, refunds, replacements, contestations. |
| Administration | KYC decisions, user validations, product moderation, account restrictions, payout holds, audit logs. |
Article 5 — Purposes of Data Processing
| Purpose | Data Used |
|---|---|
| Account creation and authentication | Identity, contact, OTP, Google OAuth, password and session data. |
| KYC and identity verification | Identity documents, selfies, business/farm data, driving documents and vehicle data. |
| Product publication and marketplace operation | Seller data, product data, stock, categories, prices and photos. |
| Order processing | Client data, basket data, seller sub-orders, product quantities and order statuses. |
| Delivery coordination | Client address, Seller location, Courier GPS, route, pickup status and delivery confirmation. |
| Payment and payout management | Delivery fees, product amounts, commissions, remittances, payout accounts, transaction references and reconciliation. |
| Quality control and claims | Claims, evidence, messages, order history, GPS, pickup confirmation and delivery proof. |
| Fraud prevention and platform security | KYC data, device data, payment behaviour, account history, GPS inconsistencies and administrative logs. |
| Customer support | Messages, order details, claim evidence and User contact details. |
| Analytics and service improvement | Aggregated search, order, stock, delivery and performance data. |
| Legal, tax and accounting compliance | Financial records, payout data, receipts, dispute records and retention logs. |
Article 6 — Legal Bases for Processing
| Processing Activity | Legal Basis |
|---|---|
| Providing accounts, orders, delivery and support | Contractual necessity. |
| KYC verification for Sellers/Farmers and Couriers | Contractual necessity; legitimate interest; fraud prevention; compliance obligations. |
| Payment collection, commissions, payouts and reconciliation | Contractual necessity; accounting and financial compliance. |
| GPS tracking while Courier is online or on mission | Contractual necessity; operational delivery coordination; safety and dispute management. |
| Claim handling and dispute resolution | Legitimate interest; contractual necessity. |
| Fraud detection, security and abuse prevention | Legitimate interest; compliance with Law No. 2010/012 on Cybersecurity. |
| Analytics and service-related communications | Legitimate interest; consent where required. |
| Legal retention and cooperation with authorities | Legal obligation. |
Article 7 — Delivery and Location Data
Location data is essential to the Aze Farms delivery model. The Platform processes location data to show relevant sellers, calculate delivery fees, assign Couriers, guide pickup and delivery routes, confirm arrival, verify incidents and resolve disputes.
Client location data is used only to support delivery, address accuracy, order completion, support and safety. Courier location data is collected while the Courier is online, searching for missions, assigned to a mission, collecting products or delivering to a Client. Aze Ventures LTD does not track Couriers continuously when they are offline, except where technically necessary for security logs or pending incident investigations.
Location data is accessible only to authorized operational staff where needed. For example, a Courier receives the Client delivery location only after mission assignment, and Aze Ventures LTD support may access location information to resolve a delivery dispute.
Article 8 — Payment and Financial Data
Aze Ventures LTD processes payment and financial data to manage delivery fees, product payments at delivery, commissions, cash collection, Mobile Money payments, Orange Money payouts, refunds, replacements, deductions, penalties and reconciliation.
Delivery fees are paid through the Platform before delivery begins. Product amounts are paid at delivery by cash to the Courier, by card where available, or by Mobile Money to numbers prevalidated by Aze Ventures LTD. Couriers collect product amounts on behalf of Aze Ventures LTD and must remit them according to the applicable reconciliation procedure.
Important: Aze Ventures LTD does not directly store sensitive bank card data. Where card payments are enabled, sensitive card information is processed exclusively by specialized payment service providers under appropriate data processing agreements. Aze Ventures LTD retains only transaction references, status, amount and confirmation data necessary for operations, accounting, claims and dispute management.
Article 9 — Access to Messages, Claims and Support Data
Aze Ventures LTD may provide messaging, support or communication tools between Clients, Sellers/Farmers, Couriers and support staff. These communications are not subject to systematic monitoring. However, authorized Aze Ventures LTD personnel may access them where necessary to:
- Investigate a missing, damaged, incorrect or delayed order;
- Verify pickup, delivery, payment or remittance obligations;
- Resolve a claim or refund request;
- Detect fraud, abuse, harassment, unsafe conduct or Platform circumvention;
- Protect the rights and safety of Clients, Sellers/Farmers, Couriers and the Platform;
- Comply with a valid request from competent Cameroonian authorities.
Access to messages and claim data is limited to authorized staff with a legitimate operational, legal, financial or support need. Aze Ventures LTD does not use communication content for unrelated advertising or commercial profiling.
Article 10 — Data Sharing and Third Parties
Aze Ventures LTD may share data with third parties only where necessary to operate the Platform, process payments, provide technical infrastructure, send notifications, store media, verify users, deliver orders, handle support or comply with applicable law.
| Recipient | Data Shared and Purpose |
|---|---|
| Payment service providers | Transaction references, payment status, amounts, Mobile Money or card processing data and fraud prevention data. |
| Cloud and database providers | Account, product, order, media, delivery and administrative data required for hosting and storage. |
| Notification and email/SMS providers | Phone numbers, email addresses, device tokens and message content required for OTP, order notifications and support messages. |
| Maps and location service providers | Coordinates, route data and delivery-related location information required for dispatch and navigation. |
| Authorized staff and administrators | Data required for verification, support, quality control, payout, claims, fraud prevention and moderation. |
| Competent authorities | Data required by valid legal process, regulatory request, court order or applicable Cameroonian law. |
10.1 What Aze Ventures LTD Does Not Do
- Aze Ventures LTD does not sell User personal data to any third party;
- Aze Ventures LTD does not share identity documents with unauthorized third parties;
- Aze Ventures LTD does not publish private addresses, KYC documents or financial information;
- Aze Ventures LTD does not use Client addresses or Courier GPS data for unrelated purposes;
- Aze Ventures LTD does not use conversation content for unrelated advertising profiling;
- Aze Ventures LTD does not retain data beyond its intended purposes, except where required by applicable legal, accounting, security or dispute obligations.
Article 11 — Technical and Organizational Security Measures
Aze Ventures LTD implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.
| Measure | Description |
|---|---|
| Password protection | Passwords are hashed and never stored in plain text. |
| OTP and authentication | OTP validation, session tokens, access/refresh tokens and session revocation mechanisms are used. |
| Encryption in transit | All communications between Users and the Platform use HTTPS/TLS encryption. |
| Sensitive data protection | Sensitive messages, KYC documents and financial references are access-controlled and protected. |
| Media storage | Product photos, KYC documents and claim evidence are stored on secure cloud services with validation and access controls. |
| Database and access controls | Business data is organized in a structured database with role-based access controls and administrative audit logs. |
| Rate limiting and input validation | Anti-abuse mechanisms, request rate limiting and input validation are applied at infrastructure level. |
| Payment security | Webhook validation, anti-duplication, idempotency and reconciliation controls are applied for payments and payouts. |
| GPS and delivery controls | Location data access is restricted to delivery, support, dispute and security purposes. |
| Administrative auditing | KYC decisions, payout holds, claim decisions and account sanctions are logged for audit and compliance purposes. |
Article 12 — Data Retention
| Data Category | Retention Principle |
|---|---|
| Client account data | Retained while the account is active and for a reasonable period after deletion where required for legal, accounting, security or dispute purposes. |
| Seller/Farmer KYC data | Retained for verification, fraud prevention, legal compliance, dispute and payout purposes, subject to APDCP retention guidelines. |
| Courier KYC and vehicle data | Retained for verification, safety, fraud prevention, mission records, payment and dispute purposes. |
| Order and delivery records | Retained for operational, accounting, claim, quality and evidence purposes. |
| Payment and payout records | Retained for the duration required by Cameroonian accounting, tax and financial law — generally a minimum of ten (10) years under CEMAC/OHADA standards. |
| GPS and route data | Retained only as long as necessary for delivery, claims, fraud prevention, safety, analytics and legal obligations. |
| Messages and support claims | Retained for dispute resolution, support continuity, evidence, safety and legal compliance. |
| OTP and session data | Deleted or expired automatically by technical mechanisms once no longer needed. |
| Administrative logs | Retained to protect the Platform, investigate abuse and comply with legal or audit obligations. |
Aze Ventures LTD may anonymize or aggregate certain data for analytics, performance measurement, demand planning and logistics optimization.
Article 13 — Account Deletion and Data Erasure
Users may request or initiate account deletion through the Platform settings or support channels. Account deletion may remove or deactivate profile information, access credentials, visible account content and certain associated media.
Deletion does not require Aze Ventures LTD to erase data that must be retained for legal, accounting, tax, payment, security, KYC, claim, fraud prevention or dispute resolution purposes. Where possible, Aze Ventures LTD may restrict, archive, anonymize or minimize retained data after account deletion.
Article 14 — User Rights
In accordance with the Data Protection Act (Law No. 2024/017 of 23 December 2024), all Users have the following rights in respect of their personal data:
| Right | Description |
|---|---|
| Right of access | Request confirmation of whether Aze Ventures LTD processes personal data about you and request a copy where applicable. |
| Right of rectification | Request correction of inaccurate or incomplete personal data. |
| Right of deletion (erasure) | Request deletion of personal data, subject to legal and operational retention obligations. |
| Right to restriction | Request limited processing in certain circumstances. |
| Right to object | Object to processing based on legitimate interests where applicable. |
| Right to portability | Receive certain personal data in a structured format where technically applicable. |
| Right to withdraw consent | Withdraw consent for processing based on consent without affecting prior lawful processing. |
To exercise any of these rights, Users may contact Aze Ventures LTD by:
- Email: privacy@azefarms.com
- In-application: through the account settings section of the Platform.
Aze Ventures LTD will acknowledge receipt and respond within the timeframes specified by applicable regulations. Identity verification may be requested before processing a rights request.
If a User believes their rights have been violated, they may submit a complaint to the APDCP once established, or to the competent courts of the Republic of Cameroon.
Article 15 — Cookies, Device Data and Tracking Technologies
Aze Farms may use cookies, device identifiers, local storage, analytics tools and similar technologies for authentication, session management, security, fraud prevention, preferences, analytics, notifications and service improvement.
Essential technologies required for the functioning and security of the Platform may be used without separate consent where permitted by applicable law. Non-essential tracking or analytics tools may be subject to consent or opt-out mechanisms where required by the APDCP.
Article 16 — Cross-Border Data Transfers
Aze Ventures LTD may use technical providers, cloud services, payment providers, messaging providers, notification systems or storage services located outside Cameroon. Where personal data is transferred or processed internationally, Aze Ventures LTD will apply appropriate safeguards required by the Data Protection Act (Law No. 2024/017), including contractual commitments with data processors, access controls and security measures, and will obtain any required authorization from the APDCP for cross-border data transfers as required by applicable law.
Article 17 — Minors
The Platform is intended for persons of legal age under Cameroonian law (eighteen years of age or older). Aze Ventures LTD does not knowingly collect personal data from minors without appropriate parental or guardian authorization. If Aze Ventures LTD becomes aware that a minor has provided personal data without required authorization, it will take immediate steps to delete or restrict the account and associated data, subject to applicable legal obligations.
Parents or guardians who become aware that their child has provided personal data to Aze Farms should contact privacy@azefarms.com immediately.
Article 18 — Data Relating to Claims, Penalties and Contestations
Aze Ventures LTD processes claim and evidence data to investigate issues such as missing products, damaged products, delayed deliveries, wrong products, payment disputes, Client absence, Courier misconduct, Seller non-compliance or false claims.
Evidence may include: order numbers, photographs and videos, pickup confirmations, GPS data, delivery timestamps, OTP or QR validation records, payment records, messages and administrative notes.
Sellers/Farmers and Couriers may submit evidence to contest penalties, deductions or refund decisions through the support channel within the timeframe set by Aze Ventures LTD. Evidence data is retained for the duration necessary to resolve the dispute and comply with applicable legal obligations.
Article 19 — Data Minimization and Role-Based Access
Aze Ventures LTD limits access to personal data based on operational need. For example:
- A Seller receives only the information necessary to prepare an order — not the Client's full identity beyond delivery requirements;
- A Courier receives delivery information needed to complete the assigned mission only;
- Support staff receive access to User data according to the specific issue being handled;
- Finance staff access payment and payout data needed for reconciliation and accounting.
Role-based access permissions are maintained and updated as the Platform evolves. Administrative access is logged for audit purposes.
Article 20 — Amendments to this Privacy Policy
Aze Ventures LTD may update this Privacy Policy to reflect changes in applicable law, regulation, Platform functionality, data processing practices, payment systems, delivery features or security measures. Material changes will be communicated by in-application notice, push notification, email or website publication, no later than thirty (30) days before taking effect.
The current version of this Privacy Policy is always accessible at www.azefarms.com/privacy. Continued use of the Platform after the effective date of an updated Privacy Policy constitutes acknowledgment of the updated Policy, subject to any consent requirement under applicable Cameroonian law.
Article 21 — Contact and Complaints
| Legal name | Aze Ventures LTD |
| Trade Register | [TO BE COMPLETED] |
| NIU | [TO BE COMPLETED] |
| Registered address | [TO BE COMPLETED], Republic of Cameroon |
| Privacy contact | privacy@azefarms.com |
| General support | support@azefarms.com |
| Legal contact | legal@azefarms.com |
| Privacy Policy URL | www.azefarms.com/privacy |
Users who believe their rights have been violated may also submit a complaint to:
- The Personal Data Protection Authority (APDCP) once established under Law No. 2024/017;
- The Agence Nationale des Technologies de l'Information et de la Communication (ANTIC);
- The competent courts of the Republic of Cameroon.
© 2026 Aze Ventures LTD — Aze Farms Platform — All rights reserved.
www.azefarms.com