Happy Halloween! Tonight, Drifty crosses to the dark side.

Skip to content
Drifty

Privacy Policy

This is a translation: the French version is the reference text.

Provisional version: this policy describes the processing actually carried out by the site. The legal bases, the retention periods by category and the final list of providers have yet to be settled and will be specified in a future version.

1. Identity and contact details of the controller

The site driftysn.com is operated by Drifty, Dakar, Sénégal. Contact: contact@driftysn.com.

2. Data processed

Depending on how you use the site, Drifty processes the following data:

  • Identity and contact details: name, phone number (identifier of your customer record), email address (optional).
  • Delivery: address and city, only when delivery is needed.
  • Orders: order content, amount, status, date, chosen payment method.
  • Payments: amount, transaction reference, method (Wave, Orange Money) and status. The payment itself is made with the payment provider; Drifty neither receives nor stores any card number or secret code.
  • Subscriptions: service subscribed to, plan, start and expiry dates, status, renewals.
  • Support: subject, category and messages of your requests, and the replies given to you.
  • Internal notes: notes written by the team on your file (customer or support request). They are never shown to the customer.
  • Referral: link between your record and that of the person who referred you or whom you referred (the referrer's phone number serves as a code).
  • Administrative logs: record of actions taken by team members in the administration area (who, what, when).
  • Technical data: to limit abuse (repeated submissions, login attempts), anonymised counters (irreversible hash of the IP address or identifier, without the address itself) are kept briefly; the host may also log network requests.

3. Purposes

This data is used to: process and deliver your orders; activate and manage your subscriptions and their renewals; contact you (notably via WhatsApp) about your order or subscription; provide after-sales support; keep the accounts; secure the service and prevent abuse; measure site audience, only if you agree (see "Statistics and trackers").

4. Legal bases

Your data is processed to perform your orders and subscriptions, provide support, keep the accounts and secure the service; audience measurement is only activated with your consent. The legal basis for each purpose will be specified in a future version of this policy.

5. Retention periods

What is actually applied today: anti-abuse counters (irreversible hashes) are deleted automatically by a daily task once their period has been closed for more than 24 hours. For other data (customer record, orders, payments, subscriptions, support requests, internal notes, administrative logs), no automatic process deletes or anonymises them: they are kept until manually deleted, notably on request. A retention period by category has not yet been set and will be specified in a future version of this policy.

6. Recipients and subcontractors

Your data is accessible to the Drifty team according to the needs of each role. To run the service, Drifty relies on technical providers: hosting and network (Cloudflare), database (Supabase), WhatsApp messaging (Meta), payment methods (Wave, Orange Money) and, only with your consent, audience measurement (Google Analytics, Meta Pixel). Your data is never resold.

7. Transfers outside the country

Some of the providers mentioned above may process data outside Senegal. The list of countries concerned and of the safeguards applied will be specified in a future version of this policy.

8. Statistics and trackers

The site may use Google Analytics (GA4) and Meta Pixel to measure its audience. These tools are only loaded after your explicit consent, given through the banner shown on your first visit. If you refuse, or as long as you have not answered, none of these scripts is loaded and no data is sent to them. You can change your mind at any time with "Manage my cookies" at the bottom of the page; withdrawing your consent reloads the page and clears the site's audience-measurement cookies. Your choice is remembered in your browser (local storage), without a Drifty cookie, and you are asked again after six months. The cart is kept in your browser (sessionStorage) for the duration of your visit.

9. Your rights

You can request access to your data, its rectification or its deletion, object to processing or request its restriction, under the conditions set by applicable law. These requests are made by email or on WhatsApp (see "Contact") and are handled manually by the team: there is no dedicated online area. Deleting or anonymising a record is done by hand, subject to applicable retention obligations, the list of which has yet to be settled.

10. Contact

To exercise your rights or ask a question about your data, write to contact@driftysn.com or contact us via WhatsApp. We may ask you to prove your identity before answering.

11. Security

The site is served over HTTPS. The administration area is protected by authentication, rights limited according to each team member's role and an action log; login attempts and certain submissions are limited to curb abuse. No measure guarantees absolute security.

12. Date of update

Text last updated: October 23, 2026.