Data protection
Privacy Policy
MVP version - last updated: September 26, 2026. This policy is prepared to align with Mali Law No. 2013-015 of May 21, 2013, as amended, and with the GDPR where applicable.
1. Data controller
Yereko is responsible for personal data processed through its website, mobile apps, dashboard, and operational services. Contact: [email protected].
2. Compliance framework
Yereko processes data according to purpose limitation, lawfulness, fairness, proportionality, accuracy, security, and limited retention. In Mali, the competent authority is the Autorité de Protection des Données à caractère Personnel (APDP). Where GDPR applies, Yereko also takes GDPR rights and legal bases into account.
3. Data collected
Depending on your role, we may process phone number, name, profile photo, address, email, current location, preferences, login identifiers, user role, device data, support messages, voice notes, photos, customer needs, searches, offerings, orders, OTP, delivery statuses, payment and settlement information, reviews, reports, and audit logs.
4. Purposes
Data is used to create and secure accounts, provide search, qualify needs, show supplier options, create and track orders, organize pickup or delivery, manage payments and settlements, provide support, prevent fraud, moderate offerings, meet legal obligations, and improve market intelligence.
5. Legal bases
Depending on context, processing may rely on service performance, consent, legal obligations, protection of essential interests, or Yereko’s legitimate interest in securing, operating, and improving the platform. Where GDPR applies, these bases are interpreted under GDPR Article 6.
6. Sensitive data
Yereko does not intentionally request sensitive data. Users should avoid sharing health, religion, political opinions, ethnic origin, biometric data, or other sensitive information in messages, voice notes, or photos unless strictly necessary and legally justified.
7. Location and delivery
Location may be used to facilitate delivery, pickup, delivery assignment, fee calculation, operational safety, and service-zone improvement. Where possible, Yereko limits location use to immediate operational needs.
8. Photos, voice notes, and evidence
Photos and voice notes may help support teams structure a need, document an order, verify a profile, or improve service quality. They should be collected only where useful for the service.
9. Sharing
Data may be shared with vendors, delivery agents, support agents, finance teams, administrators, technical providers, hosting providers, competent authorities, or partners strictly necessary for service execution. Each actor should access only the information required for their role.
10. International transfers
Where technical providers or hosting services involve transfers outside Mali, Yereko should implement appropriate safeguards and, where required, comply with APDP formalities or authorizations and applicable rules.
11. Security
Yereko applies reasonable safeguards: authentication, role-based access, HTTPS, audit logs, internal access limitation, backups, and environment separation where possible. No system is risk-free, and users must also protect their credentials.
12. Retention
Data is kept as long as necessary to provide the service, manage disputes, meet accounting, financial, security, or legal obligations, then deleted, anonymized, or archived according to applicable rules.
13. Your rights
You may request access, rectification, update, objection, restriction, deletion where possible, and portability where GDPR applies. Some data may be retained where necessary for security, legal obligations, transaction evidence, or fraud prevention.
14. Complaints
You may contact Yereko at [email protected]. You may also contact the APDP in Mali for personal-data-protection matters.
15. Cookies and analytics
The public website may use cookies strictly necessary for operation. Any analytics, advertising, or non-essential tracking should be clearly presented and, where required, subject to consent.
16. Children
Yereko is not intended for direct use by children without appropriate supervision. If a minor’s data is processed, it must be handled with an appropriate legal basis and reinforced protection.
17. Changes
This policy may be updated to reflect service, regulatory, or processing changes. Material changes will be communicated by reasonable means.
18. Contact
To exercise rights or ask questions: [email protected].