1. Who we are
Effective date: 11 October 2026.
This Privacy Policy explains how Euro-African Diffusion LTD (“EADL”, “we”, “us” or “our”) collects and uses personal data when you visit or use euroafric.com (the “Website”), submit a B2B enquiry or distributor application, contact us, receive or manage an invoice, or pay an invoice through our online checkout.
For privacy questions or requests, contact us by email only at contact@euroafric.com. We do not handle privacy requests by telephone.
2. Personal data we collect
The information we collect depends on how you use the Website and our services. It may include:
- Contact and business details, such as your company name, contact name, job title, professional email address, telephone number, country of operation, business type and billing address.
- When you submit an enquiry or distributor application, we also collect the brands or categories you are interested in, your message and any estimated requirements you provide.
- Invoice and transaction details, such as invoice number, amount, currency, payment status, payment date, refunds and correspondence about a payment.
- Payment-related information. Payments are handled through Stripe's checkout services. We do not receive or store your full card number or card security code. Stripe may provide us with limited payment information, such as the payment result and, where available, the card brand and last four digits.
- Account or service information that you provide when contacting us or using Website features, including support requests and messages.
- Limited technical information, such as the page and URL from which a form was submitted, the site language, your consent record and browser user agent. For anti-spam protection and rate limiting, we use a hashed (non-reversible) version of your IP address.
Enquiry information is stored in our database so our authorised team can respond and manage the resulting business relationship.
Please do not submit sensitive personal data through the Website unless we specifically request it and explain why it is needed.
3. How and why we use personal data
We use personal data only where we have a lawful basis to do so. Depending on the circumstances, we process it to:
- Respond to B2B enquiries and distributor applications, assess your request, send relevant commercial proposals and provide related support. We rely on the consent you give when submitting a form and, where applicable, our legitimate interest in responding to professional enquiries addressed to us.
- Create, issue and administer invoices, identify the relevant customer or transaction, accept and confirm payments, process refunds and provide payment support. This is necessary to perform a contract or take steps at your request before entering into one.
- Maintain financial, tax and business records and meet legal obligations. This processing is necessary for compliance with applicable law.
- Protect the Website and our business, prevent fraud and misuse, troubleshoot problems, and establish or defend legal claims. We rely on our legitimate interests, balanced against your rights and freedoms.
- Protect the Website against spam and automated abuse. We rely on our legitimate interest in securing the service and limiting abusive submissions.
- We do not use enquiry information for advertising profiling. We may send commercial information related to a request or business relationship where permitted by law. You may object to direct marketing or opt out at any time by email.
If information is required to complete a payment, issue an invoice or comply with the law, not providing it may prevent us from providing that service or completing the transaction.
4. Payments processed by Stripe
When you choose to pay an invoice online, you are directed to or interact with a checkout provided by Stripe. Stripe collects and processes payment information to securely complete the transaction, help prevent fraud, comply with its legal obligations and provide its payment services. EADL receives payment and invoice information needed to administer the transaction, but does not receive your full card number or security code.
Stripe may process some personal data for its own purposes and may act as an independent controller for those activities. Stripe's handling of your information is described in its Privacy Policy: https://stripe.com/privacy. Please review Stripe's policy for details about its processing, retention and your rights in relation to data Stripe controls.
5. Cookies and similar technologies
The Website currently sets no advertising or analytics cookies and does not use third-party audience tracking. It may use technologies that are strictly necessary to operate the Website, protect it against abuse or complete checkout. When you use Stripe checkout, Stripe may use cookies or similar technologies for payment, security and fraud prevention, as described in Stripe's Privacy Policy.
You can manage cookies through your browser settings. Disabling technologies that are necessary for security or checkout may prevent some Website features or payments from working.
6. Who receives personal data
We may share personal data, only as necessary, with:
- Stripe and other payment or financial service providers involved in processing and reconciling payments.
- Website hosting, cloud storage, IT, security, communications and customer-support providers acting on our instructions.
- Professional advisers, auditors, insurers, banks and payment institutions where needed for our business or legal obligations.
- Public authorities, regulators, courts or law-enforcement bodies where required by law or necessary to protect rights, safety or property.
- A buyer, investor or successor in connection with a proposed or completed business sale, restructuring or transfer, subject to appropriate safeguards.
We do not sell personal data. We do not share payment information with third parties for their own marketing.
7. International data transfers
EADL is established in Cyprus, and service providers may process personal data in countries outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we use a legally recognised transfer mechanism where required, such as an adequacy decision or appropriate safeguards including the European Commission's Standard Contractual Clauses. You may contact us to request further information about the safeguards relevant to a particular transfer.
8. How long we keep personal data
We keep personal data only for as long as needed for the purposes described in this Policy. Invoice, transaction and accounting records are retained for the periods required by applicable tax, accounting and financial-record laws. Support correspondence and Website security logs are kept for a period appropriate to resolving the request, maintaining security and addressing potential claims. When information is no longer required, we delete it or securely anonymise it, unless the law requires or permits longer retention.
9. Your privacy rights
Depending on applicable law, you may have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, or a copy of data you provided in a portable format. You may also object to processing based on legitimate interests and withdraw consent at any time where we rely on consent. Withdrawing consent does not affect processing carried out before withdrawal.
To exercise a right, email contact@euroafric.com with “Privacy request” in the subject line. Privacy requests and our responses are handled by email only. We may need to verify your identity before responding. We generally respond within one month, subject to any lawful extension for complex or numerous requests. You also have the right to complain to your local data protection authority. If you are in Cyprus, you may contact the Office of the Commissioner for Personal Data Protection at https://www.dataprotection.gov.cy/.
10. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No website, transmission or storage system can be guaranteed to be completely secure. Please contact us promptly if you believe that your information or a payment has been compromised.
11. Children
The Website and invoice payment service are intended for businesses and adults, and are not directed to children. We do not knowingly collect personal data from children through these services. If you believe a child has provided personal data to us, contact us so that we can review and take appropriate action.
12. Changes to this Policy
We may update this Policy to reflect changes in our Website, payment services, data practices or legal requirements. We will publish the updated version on the Website and revise the effective date above. Where required by law, we will give you additional notice or ask for consent.
13. Contact us
Email: contact@euroafric.com (subject: Privacy request)