Effective Date: 9 September 2026
Last Updated: 9 September 2026

FOOTKARFT AFRICA respects the privacy rights of customers and website visitors using https://footkarft.africa/.

FOOTKARFT AFRICA operates from Ghana and Nigeria. The EU General Data Protection Regulation (GDPR) and UK GDPR apply only where our activities fall within their respective legal scope.

This page explains the measures and rights that may apply when GDPR or UK GDPR governs the processing of personal information.

1. When GDPR May Apply

The GDPR may apply where FOOTKARFT AFRICA specifically offers goods or services to individuals located in the European Union or monitors their behaviour in circumstances covered by the GDPR.

The UK GDPR may similarly apply where our processing specifically relates to offering goods or services to individuals in the United Kingdom or monitoring their behaviour in the UK.

Simply being able to access our website from the EU or UK does not by itself mean that GDPR or UK GDPR automatically applies to every interaction.

2. Personal Information We May Process

Depending on your interaction with our website, we may process information such as:

• Name and email address
• Billing and delivery details
• Customer account information
• Order and purchase history
• Payment status and transaction references
• Returns and refund information
• Customer-support communications
• Reviews or other voluntarily submitted information
• IP address, browser, device, and website usage data
• Cookie and analytics information

3. Lawful Bases for Processing

Where GDPR applies, we may rely on lawful bases including:

Contract

To:

• Process orders
• Complete payments
• Arrange delivery
• Manage returns or refunds
• Provide requested customer services

Consent

Consent may be relied upon for:

• Optional marketing communications
• Non-essential cookies
• Certain personalization or advertising activities

Where processing relies on consent, you may withdraw it where legally permitted.

Legal Obligation

Information may be processed or retained where necessary to comply with applicable:

• Tax requirements
• Accounting obligations
• Regulatory requirements
• Legal proceedings

Legitimate Interests

Where permitted, we may process information for legitimate interests such as:

• Website security
• Fraud prevention
• Customer service
• Business administration
• Website improvement
• Protecting legal rights

These interests should be balanced against applicable individual privacy rights.

4. Your GDPR Rights

Where GDPR or UK GDPR applies to you, you may have the right to:

• Access personal information held about you
• Correct inaccurate or incomplete information
• Request deletion of eligible information
• Restrict certain processing
• Object to certain processing
• Request eligible data portability
• Withdraw consent
• Object to certain direct marketing
• Manage non-essential cookies
• Lodge a complaint with an applicable supervisory authority

These rights may be subject to legal exceptions.

5. Right to Access

You may request confirmation of whether we process your personal information and request access to eligible information held about you.

We may take reasonable steps to verify your identity before responding.

6. Right to Correction

You may ask us to correct personal information that is inaccurate or incomplete.

Customers may also be able to update certain account information directly where account functionality is available.

7. Right to Deletion

You may request deletion of eligible personal information where the applicable legal requirements are satisfied.

Certain information may still need to be retained for purposes such as:

• Tax and accounting records
• Completed transactions
• Fraud prevention
• Legal disputes
• Regulatory obligations
• Establishing or defending legal claims

Please refer to our Account & Data Deletion Policy for additional information.

8. Marketing and Consent

Where applicable, promotional communications will be handled in accordance with relevant consent and marketing requirements.

You may unsubscribe from promotional communications at any time.

This does not prevent us from sending necessary transactional messages relating to:

• Orders
• Payments
• Shipping
• Returns
• Refunds
• Account security

9. Cookies

Where GDPR or UK GDPR requires consent for non-essential cookies, appropriate consent mechanisms may be used.

You may be able to accept, reject, or manage optional cookies through available website controls.

Please refer to our Cookie Policy for further information.

10. International Data Transfers

Because FOOTKARFT AFRICA operates from Ghana and Nigeria and may use international service providers, personal information may sometimes be processed across national borders.

Where GDPR transfer requirements apply, appropriate safeguards may be used, including:

• Standard Contractual Clauses
• Adequacy decisions
• Contractual safeguards
• Other legally recognized transfer mechanisms

UK GDPR also contains specific rules for restricted transfers outside the UK where that law applies.

11. Data Security

We take reasonable measures to protect personal information from unauthorized access, loss, misuse, disclosure, or alteration.

Depending on the systems used, safeguards may include:

• Secure website connections
• Restricted access
• Secure hosting
• Security monitoring
• Software updates
• Backup procedures
• Secure third-party payment processing

No online system can guarantee absolute security.

12. Data Retention

We retain personal information only for as long as reasonably necessary for:

• Orders and payments
• Customer accounts
• Delivery and fulfilment
• Returns and refunds
• Customer support
• Fraud prevention
• Legal, tax, or accounting obligations
• Dispute resolution

Information may be deleted or anonymized when it is no longer reasonably required.

13. How to Exercise Your Rights

To submit an eligible GDPR or privacy request, contact:

support@footkarft.africa

Please provide enough information for us to identify the relevant account or transaction and understand your request.

We may verify your identity before providing, correcting, or deleting personal information.

14. Relationship With Ghana and Nigeria Data Protection Laws

GDPR Compliance does not replace the national data protection requirements that may apply to our principal operations.

Relevant requirements may also include:

• Ghana’s Data Protection Act, 2012 (Act 843)
• Nigeria’s Nigeria Data Protection Act, 2023

The applicable law depends on the circumstances of the processing and location of the individuals concerned.

15. Changes to This Page

We may update this GDPR Compliance page when our practices, services, or applicable legal requirements change.

The current version will be published on our website with an updated Last Updated date.

16. Contact Us

For GDPR or privacy-related questions:

Website: https://footkarft.africa/
General Email: info@footkarft.africa
Privacy & Support: support@footkarft.africa

Ghana Address

GA-047-7796, House Number 7,
Sapele Crescent, Near ATTC School,
Kokomlemle, Accra, Ablekuma Central,
Greater Accra, Ghana

Nigeria Address

Plot 773, Daki Biyu,
Opposite Yah Wahab,
Wuye, FCT, Nigeria