Privacy policy

What we collect

We only collect what we need to take an order, deliver it, and stay in touch about it. Specifically:

• Account details you give us when signing up: name, email, optional phone number, language preference.
• Order details: products, sizes, delivery address, contact phone, optional notes, total in TZS.
• Messages you send us on WhatsApp, Instagram or by email about an order or a product.
• Technical signals your browser sends: IP address, device type, language, pages visited (used in aggregate for analytics).

Where the data lives

Your account, addresses, wishlist and orders are stored in our Supabase project on Postgres. Row-level security keeps each customer’s rows visible only to the account that created them; only authorised PCM admins can view orders for fulfillment.

Product images live in Supabase Storage. Product Reels are hosted on Cloudflare Stream. The site is served from Vercel’s edge network. None of these vendors are sold your data — they process it on our behalf so the site can run.

Analytics and pixels

We use privacy-respectful analytics to understand which products and pages perform. When enabled, that includes Google Analytics 4 and a Meta Pixel for retargeting our own catalogue to Instagram visitors. These tools set cookies that you can manage from the cookie policy or from your browser. We never use them to look up an individual customer.

WhatsApp orders

While native checkout is paused (v1), “Place order” hands you to WhatsApp with a prefilled itemised message. Once you press send in WhatsApp, the conversation is governed by Meta’s WhatsApp privacy terms in addition to ours. We treat the WhatsApp thread as confidential and only use it to confirm your order and arrange delivery.

How we use your information

• To fulfill orders, schedule delivery and process exchanges.
• To answer questions on WhatsApp, Instagram or email.
• To run essential operations: signing you in, remembering your cart and language, fraud prevention.
• To improve the site through aggregate analytics.
• To send order updates. We will only email or message you about marketing if you have opted in.

Sharing

We share order details with the delivery courier or rider that brings your order. When native checkout launches we will share payment details with the licensed Tanzanian payment processor handling that transaction (M-Pesa, Tigo Pesa, Airtel Money, or card). We will never sell your information.

How long we keep it

• Order records: 7 years, to comply with Tanzanian tax record-keeping requirements.
• Account profile: while your account is active, plus 24 months after last sign-in. You can ask us to delete it earlier.
• Marketing list: until you unsubscribe.
• Analytics: aggregated and retained per the analytics provider’s default policy (typically 14 months for GA4).

Your rights

You can ask us to access, correct, delete or export the personal information we hold about you. Most of this you can do yourself from your /account pages. For anything else, message +255 747 237 367 on WhatsApp or email the address below and we will respond within 30 days.

Security

The site runs over HTTPS end to end. Service-role keys never reach your browser. Supabase row-level security means a sign-in only opens up your own rows. We patch our dependencies and rotate secrets when needed.

Children

Our products are sold to adults. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us their information, message us and we will delete it.

Changes

We will update the date at the top whenever this policy changes. If a change materially affects how we use your information, we will tell account holders by email before it takes effect.

Contact

Perfect Cloth Match · Husnaty Boutique · Azam Ali, Lost Tribes, Dar es Salaam, Tanzania. WhatsApp: +255 747 237 367. Instagram: @perfectclothmatch_.