Legal
Privacy Policy
Last updated: 6 August 2026
This policy explains what Makochera Enterprise does with your information when you use Ntare Gift Shop, which covers the E-Ntare mobile app and the website at e-ntare.com.
The short version: we ask for the details we need to send you your order or record your donation, and nothing beyond that. We do not sell your data, we do not run ads, and we do not track you around the internet.
If you use the platform, this policy applies to you. If you are not comfortable with it, please stop using the service.
1. What we collect
We collect information at the point you give it to us, and only for the thing you are doing at the time.
When you place an order
We ask for your name, phone number and delivery address so we can deliver the items. An email address is optional. If you give us one, we email you a confirmation and a link for tracking that order. Anyone who has that link can view the order, so treat it as private.
When you donate
A phone number is required, because the payment prompt is sent to that number. Your name, email and address are optional. If you tick the anonymous box, we do not attach your name, email or address to the donation at all.
When you message us
The contact form asks for your name, phone number and message. On the website there is also a button that attaches your current location. It is entirely optional. Nothing is read from your device unless you tap it, and your browser will ask permission first. If you do tap it, we store the address and coordinates alongside your message so we know where to reach you. The mobile app does not request your location at all.
When you leave a review
We store the name you type, the role you choose, your rating and your comment. Reviews are checked by us before they appear publicly, so use only the name you are happy for other people to see.
Staff accounts
The website has sign in for the people who run the shop. Those accounts hold a name, an email and a password. Passwords are stored hashed, which means we cannot read yours and neither can anyone who got hold of the database. The mobile app has no sign in and no accounts. You can browse, order, donate and message us without creating one.
What we do not collect
We do not use analytics tools, advertising pixels or crash reporting. We do not build a profile of you and we do not follow you onto other sites. The app asks for no device permissions beyond internet access, so it has no route to your contacts, photos, camera or location. Like any website, our host keeps standard server logs of requests for security and troubleshooting.
2. How we use it
We use what we collect to:
- Take payment and deliver your order
- Record donations and credit them to the right campaign
- Send confirmations, receipts and order updates
- Reply when you contact us
- Publish reviews once we have checked them
- Keep the platform secure and stop abuse
- Keep the records that tax and accounting rules require
We do not send marketing messages, and we do not use your details for anything you did not come here to do.
3. Payments
Mobile money payments are handled by MarzPay. When you pay, the PIN prompt comes from them and goes straight to your phone. Your PIN never passes through us and we never see it. What we get back is the amount, a reference, and whether the payment went through.
4. Who we share it with
We do not sell your data. We share it only with the services that make the platform work:
- MarzPay for mobile money payments and payouts
- Cloudinary for storing images
- MongoDB Atlas for the database
- Vercel for hosting the website and the API
- Our email provider for order confirmations, receipts and security codes
- OpenStreetMap, and only if you tap the location button on the contact form. Your coordinates are sent to their Nominatim service to be turned into a street address.
Each of these has its own privacy policy covering what they do on their side, and it is worth reading them. We may also hand over data where the law requires it, or where we need to protect users and the platform.
5. How long we keep it
Orders, donations and payment records are kept for as long as tax and accounting rules require. Contact messages and reviews are kept until we no longer need them, and you can ask us to remove yours sooner. When a record is no longer needed, we delete it or strip out the parts that identify you.
6. Security
Traffic runs over HTTPS, passwords are hashed, payment details stay with the payment provider, and admin actions like withdrawals need a one time code sent by email before they go through. That said, no system is completely secure, and we would rather say so than promise otherwise.
7. Your choices
You can:
- Donate anonymously, so no name is attached
- Skip the email field when ordering, or skip the location button when messaging
- Ask for a copy of what we hold about you
- Ask us to correct something that is wrong
- Ask us to delete your data
For any of these, email us at makocheraenterprize@gmail.com.
8. Deleting your data
To have your data removed, email makocheraenterprize@gmail.com from the address you used, or include the phone number on the order so we can find it. We will delete what we can. Completed payments are the exception, because we are required to keep those records.
If you have a staff account on the website, the same email removes the account and its details.
9. Children
The service is not meant for children under 13 and we do not knowingly collect their information. If we learn that we have, we delete it.
11. Updates to this policy
We update this page when the way we handle data changes, and the date at the top always reflects the latest version. If a change is significant, we will say so in the app or on the site.
12. Contact us
If you have any questions, reach out anytime: