Last updated: June 2026
Page 1 of 5
Marketa ("we," "us," or "our") operates a Rwanda-focused e-commerce marketplace with buyer and seller protection, escrow-style payouts, and payments processed through Paypack. This Privacy Policy explains how we collect, use, share, store, and protect personal data when you use our website, seller dashboard, storefront pages, and related services (collectively, the "Platform").
By registering, checking out, selling on Marketa, or otherwise using the Platform, you acknowledge this Privacy Policy alongside our Terms and Conditions. If you do not agree with our practices, please do not use Marketa.
This policy applies to all users, including buyers, sellers (tenants), shippers, and visitors who interact with public pages. Store-specific policies published by individual sellers may supplement this policy for matters within that seller's direct customer relationship, but Marketa remains responsible for platform account data and payment orchestration as described here.
Marketa is the controller of personal data processed for marketplace accounts, platform security, escrow operations, dispute handling, and fee settlement. Paypack acts as an independent payment processor with its own privacy obligations for payment credentials and transaction settlement data.
When you buy from a seller, that seller receives fulfillment information necessary to deliver your order. Sellers must use buyer data only for order fulfillment, customer service, and legal compliance related to that sale.
This policy covers data collected online through Marketa and data you provide through support, disputes, verification, or payout onboarding. It does not cover third-party websites linked from Marketa, which maintain their own policies.
We may update this Privacy Policy to reflect changes in our practices, technology, fees, or legal requirements. The "Last updated" date will change, and material updates may be communicated by email, in-app notice, or a prominent banner. Continued use after changes take effect means you accept the updated policy, except where further consent is required by law.
Page 2 of 5
We collect information you provide directly, including:
We automatically collect technical and usage data, including IP address, device type, browser, operating system, approximate location derived from IP, session identifiers, log files, and events such as pages viewed, searches, clicks, and checkout steps.
If you enable notifications, we may collect push tokens and app version information. We may also receive limited status metadata from Paypack about whether payments succeeded, failed, or were reversed.
We use personal data to:
We do not use your payment PIN or full card credentials—those are handled by Paypack. We do not sell your personal data.
Where applicable under Rwandan data protection principles and similar frameworks, we process personal data based on:
You may withdraw consent where processing is consent-based without affecting the lawfulness of prior processing. Refusing necessary processing may limit your ability to buy, sell, or receive payouts.
Page 3 of 5
Card numbers, mobile-money PINs, and full payment credentials are collected and processed by Paypack, not stored in complete form on Marketa servers. We receive references such as transaction IDs, amounts, currency, status, and masked or tokenized identifiers needed to match payments to orders, manage escrow, and record the 5% platform fee on each completed sale.
We share with Paypack the order amount, buyer and seller identifiers linked to the transaction, and contact details required for receipts, refunds, and compliance. Paypack's use of your data is governed by their privacy policy and applicable financial regulations; we encourage you to review their documentation.
We retain payment-related records for accounting, dispute resolution, chargebacks, fee audits, and legal retention periods even after an order is complete.
We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure sessions, measure performance, and prevent fraud. Essential cookies are required for authentication, checkout, and security; disabling them may prevent normal use of Marketa.
Analytics and performance cookies help us understand traffic patterns and fix errors. Where required, we ask for consent before placing non-essential cookies. You can manage cookies through your browser settings and, where offered, through our cookie preference controls.
We do not use cookies to store Paypack credentials. See our Cookie Policy for more detail.
Buyers: your name, delivery address, and contact details are shared with the seller fulfilling your order. Sellers must not add you to unrelated marketing lists without consent where required by law.
Sellers: your store name, public profile, listings, ratings, and response metrics may be visible to buyers and visitors. Verification documents you submit are kept confidential and used for identity, payout, and risk review unless disclosure is required by law or dispute resolution.
Disputes: messages and evidence may be visible to Marketa staff and, during an active dispute, to the other party to the transaction. We may monitor communications for fraud, policy violations, and safety in accordance with our Terms.
Page 4 of 5
We use trusted service providers for hosting, email delivery, customer support tools, analytics, image hosting, and security monitoring. They process data only on our instructions and under appropriate confidentiality and security obligations.
We may disclose information if required by law, court order, or governmental request in Rwanda or other jurisdictions with competent authority, or when we believe disclosure is necessary to protect rights, safety, fraud investigation, or enforcement of our Terms and fee policies.
In a merger, acquisition, or asset sale, user data may transfer subject to this policy or notice to you. We do not sell personal data to data brokers.
We retain account and profile data while your account is active and for a reasonable period afterward to resolve disputes, enforce terms, collect outstanding fees, and comply with law.
Order, payment, escrow, platform fee, and dispute records are kept for at least the period required for tax, accounting, and consumer protection obligations in Rwanda, typically several years unless a longer period is mandated.
Marketing preferences and cookie consent logs are retained as needed to demonstrate compliance. You may request deletion subject to exceptions where we must retain data for legal, security, or ongoing transaction reasons.
When retention periods end, we delete or anonymize data where feasible. Backups may persist for a limited time before being overwritten according to our backup schedule.
We implement administrative, technical, and organizational measures appropriate to the nature of our processing, including encryption in transit, access controls, hashed passwords, and monitoring for suspicious activity. No method of transmission or storage is completely secure; you are responsible for protecting your account credentials.
If we become aware of a personal data breach likely to affect your rights, we will notify you and relevant authorities as required by applicable law. Please report suspected unauthorized access to your account immediately through our support channels.
Page 5 of 5
Depending on applicable law in Rwanda and other jurisdictions that may apply to you, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to data portability where technically feasible. You may also withdraw consent and lodge a complaint with a supervisory authority where one exists.
To exercise rights, contact us using the details below. We may need to verify your identity before responding. We will answer within a reasonable time unless an extension is permitted by law; some requests may be denied where exceptions apply, such as ongoing fraud investigations, open disputes, or legal retention duties.
You can update much of your profile information directly in account settings. Marketing emails, where sent, include an unsubscribe link.
Marketa is not directed at children under eighteen, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us information, contact us and we will take steps to delete it promptly.
Our primary operations and data processing are oriented toward users in Rwanda. Some service providers, Paypack, or infrastructure partners may process data in other countries with different data protection laws.
Where data is transferred outside Rwanda, we rely on appropriate safeguards such as contractual clauses, provider certifications, or your consent where required, to protect your information in line with this policy and applicable requirements.
We may use automated systems to detect fraud, score account risk, or flag policy violations. These systems support human review and account actions; you may contact us if you believe an automated decision materially affected your account without adequate explanation.
For privacy questions, requests to exercise your rights, or concerns about how we handle personal data, contact Marketa's privacy or support team at the email or postal address published on our website's Contact or Privacy page. Include enough detail for us to identify your account and understand your request.
If you are not satisfied with our response, you may have the right to contact the relevant data protection or consumer authority in Rwanda or your place of residence where applicable law provides that remedy.