How YahLa handles customer information

Account details: name, email address, and password (stored as a hash).

Contact details: phone number, delivery addresses, and any communication you send to support.

Order details: items purchased, totals, coupon use, and delivery preferences.

Payment references: a payment provider reference is stored against each order. Card numbers and PINs are never seen or stored by YahLa.

Technical data: minimal cookies and session identifiers used to keep you signed in and to remember your cart.

We use strictly necessary cookies for sign-in sessions, cart contents, checkout state, and site security. These cannot be disabled without breaking core functionality.

We do not currently use advertising or third-party tracking cookies. If this changes we will update this page and request consent before any non-essential cookie is set.

Supabase (database, authentication, file storage) — hosts your account, orders, and product images.

Paystack (payments) — processes card and mobile-money payments. Card details are entered on Paystack and never reach YahLa servers.

Resend (transactional email) — delivers order, password-reset, and support emails.

Vercel (hosting) — serves the storefront and admin panel.

Each provider only receives the minimum information needed to do its job.

Account and order records are kept for as long as your account is active and for up to seven years after closure to meet Zambian tax and accounting requirements.

Support messages are kept for two years.

Marketing preferences are kept until you change them.

You can request access to, correction of, export of, or deletion of your personal information at any time. Visit the data-rights page or email support to start a request.

We respond to verified requests within 30 days.

You can also lodge a complaint with the Data Protection Commissioner of Zambia.

For any privacy question email yahlashopzm@gmail.com or call +260 97 994 3807. Mailing address: Lusaka, Zambia.