At Afro Taste Hub (“we”, “our”, or “us”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you visit our website afrotastehub.com (the “Site”) and use our services. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site.
1. Who We Are
Afro Taste Hub is an online directory platform connecting African food lovers with authentic African food vendors, restaurants, caterers, and grocery businesses across the United Kingdom, United States, and Canada. Our registered business operates online at afrotastehub.com. For any privacy-related enquiries, you can contact us at privacy@afrotastehub.com.
2. Information We Collect
We may collect the following categories of personal information:
Information you provide to us:
- Account registration details — name, email address, and password
- Vendor listing information — business name, address, phone number, description, photos, opening hours, menu details, and social media links
- Contact form submissions — name, email address, and message content
- Newsletter sign-up — email address
- Reviews and ratings you submit for vendors
Information collected automatically:
- IP address and approximate location
- Browser type, device type, and operating system
- Pages visited, time spent on the Site, and referring URLs
- Cookie data (see Section 6 for full details)
3. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your account on our platform
- To publish and manage vendor listings on the directory
- To respond to your enquiries, support requests, and contact form submissions
- To send newsletters and marketing emails (only where you have opted in)
- To display and manage vendor reviews submitted by users
- To improve and personalise our website and services
- To monitor and analyse usage of the Site for performance and security purposes
- To comply with our legal obligations under UK, US, and Canadian law
- To detect, prevent, and address fraudulent or abusive activity
4. Legal Basis for Processing (UK & EU GDPR)
Where UK GDPR applies, we process your personal data on the following legal bases:
- Contract performance — processing necessary to provide our directory services to you, including managing your account and publishing your listing
- Legitimate interests — to improve and secure our platform, prevent fraud, and communicate service-related updates
- Consent — for marketing emails and newsletters; you may withdraw consent at any time by clicking the unsubscribe link in any email or contacting us
- Legal obligation — where we are required by law to process or retain your data
5. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
- Service providers — trusted third-party companies that help us operate the Site (such as hosting providers, email delivery services, and analytics platforms) under strict data processing agreements
- Payment processors — if you purchase a premium listing, payment data is handled by our secure payment provider (e.g. Stripe or WooCommerce Payments); we do not store your card details
- Legal requirements — where required to comply with applicable laws, court orders, or government requests
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections
Vendor listing information (business name, address, phone number, description, photos) is displayed publicly on the Site as intended by the vendor.
6. Cookies
Our Site uses cookies — small text files stored on your device — to improve your experience and help us understand how visitors use the Site. We use the following types of cookies:
- Essential cookies — required for the Site to function correctly, including login sessions and security
- Analytics cookies — help us understand how visitors interact with the Site (e.g. Google Analytics); data is anonymised where possible
- Functionality cookies — remember your preferences such as language and location settings
- Marketing cookies — only used where you have given explicit consent
You can control and delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Site. For full details, please see our Cookie Policy.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law:
- Account data — retained for the duration of your account, plus up to 2 years after account deletion unless a longer period is required by law
- Vendor listings — retained while the listing is active; removed within 30 days of a verified deletion request
- Contact form messages — retained for up to 12 months for customer service records
- Newsletter subscriptions — retained until you unsubscribe or request deletion
- Analytics data — retained in anonymised form for up to 26 months
8. Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
UK & EU residents (UK GDPR / GDPR):
- Right to access the personal data we hold about you
- Right to rectification of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing in certain circumstances
- Right to data portability in a machine-readable format
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time where processing is consent-based
- Right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk
US residents (CCPA — California):
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt out of the sale of personal information (we do not sell personal data)
- Right to non-discrimination for exercising your privacy rights
Canadian residents (PIPEDA):
- Right to access your personal information
- Right to challenge the accuracy of your personal information
- Right to withdraw consent for certain uses of your data
To exercise any of these rights, please contact us at privacy@afrotastehub.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include SSL encryption, secure server infrastructure, and restricted access controls. However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Third-Party Links
Our Site may contain links to third-party websites, vendor websites, and social media platforms. These sites are not operated by us and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site you visit. The inclusion of a link on our Site does not imply our endorsement of that site or its privacy practices.
11. Children's Privacy
Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe that a child under 13 has provided us with personal information, please contact us immediately at privacy@afrotastehub.com and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or a prominent notice on the Site. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
13. Contact Us