Privacy Policy

• “Personal data”: any information relating to an identified or identifiable natural person.
• “Operating data”: data entered or produced by an Organisation for its business (sales, orders, stock, prices, tills, expenses, schedules, customers).
• “Aggregated data”: statistics drawn from several Users or Organisations, anonymised so that they identify neither a person nor an Organisation.
• “Payment Provider”: a licensed institution or operator that executes electronic payments.

The Publisher is the controller of the data relating to the creation and management of Accounts, the billing of Plans, the security of the Services, the joneasy.africa website and the relationship with Users.

Each Organisation is the controller of the data it enters or collects for its own business: data on its Employees (profile, salary, schedule, clock-ins, leave, bonuses, sanctions), its customers (orders, bookings, debts, deposits, loyalty) and its suppliers. For that data, the Publisher acts as a processor, on the Organisation's instructions as constituted by the Terms and the configuration of the Services.

It is for the Organisation to inform its Employees and customers, to have a legal basis for its processing, to complete the formalities required by the competent authority of its country and to answer requests from data subjects. The Publisher cannot be held liable for an Organisation's failure to meet these obligations.

Depending on how you use the Services, the following categories of data may be processed:

• account data: surname, first name, phone number, country, language, profile photo, email address when you provide it;
• security data: PIN stored in protected form, login logs, device identifiers. Fingerprint and face recognition stay on your device: the Publisher only receives the result of the check;
• Customer usage data: venues viewed and favourited, bookings, orders and rounds, payments, debts and deposits, loyalty points and rewards, coupons, gift cards, Wallet balance and movements, reviews, friends and outings;
• Organisations' Operating data: catalogue, prices, stock, sales, tills, expenses, withdrawals, orders to depots, deliveries, tables, commercial policy;
• staff data, entered by the Organisation: access profile, position, salary, schedule, clock-ins and their location, absences, bonuses, sanctions;
• location data, with your permission: device position to show nearby venues and depots, record a sales point's position, validate a clock-in or guide and track a delivery;
• phone contacts, with your permission: to find your friends who are already registered and invite them to an outing;
• content: photos, catalogues, announcements, statuses, messages, expense receipts, and metadata of calls made in the Services;
• payment data: method used, payment phone number, amount, date, status and reference of the transaction. Full bank card details are processed by the Payment Providers and are not kept by the Publisher;
• Organisations' billing data: Plan, Boosters, invoices, commissions, payment history;
• technical data: IP address, device and system type and version, app version, error logs, notification identifier;
• data sent through the website: information entered in the contact, review, question and newsletter forms; country inferred from your connection or your browser's time zone to show your country's prices.

You are responsible for the accuracy of the data you provide. When you provide a third party's data (Employee, friend, contact), you warrant that you are authorised to do so.

Data is processed for the following purposes:

• providing the Services: creating and managing Accounts, profiles and privileges, recording orders, bookings, payments and deliveries, running loyalty and the Wallet (performance of the contract);
• billing Plans, commissions, Boosters and announcements, and recovering amounts due (performance of the contract);
• securing the Services, preventing and detecting fraud, abuse and use by minors, and keeping evidence of operations (legitimate interest and legal obligations);
• providing support, answering requests and sending service notifications (performance of the contract);
• improving the Services, producing statistics and Aggregated data (legitimate interest);
• informing you about JonEasy news and offers, in line with your choices (legitimate interest or consent, depending on applicable law);
• complying with legal, accounting and tax obligations, and answering requests from authorities (legal obligation);
• accessing the device's location, contacts, camera and notifications (consent, which you can withdraw in your phone's settings).

Refusing to provide certain data or withdrawing a permission may make all or part of the Services unavailable.

The Publisher treats an Organisation's Operating data as confidential. It does not disclose it to another Organisation, a competitor or a third party for commercial purposes, except: on the Organisation's instruction; for the normal operation of the Services (for example, sending an order to the chosen depot, showing the public catalogue to Customers); to technical providers bound by confidentiality; or at the request of a competent authority.

Information that an Organisation chooses to make public in JonEasy NOW (name, logo, photos, address, position, catalogue, prices, statuses, announcements, services offered) is not confidential.

The Publisher may produce Aggregated data from the use of the Services and use it freely to improve the Services, produce indicators, studies and recommendations, and develop new features, including by automated processing. Such data identifies neither a person nor an Organisation.

No Operating data identifying an Organisation is made available to another Organisation.

To the extent necessary, data may be accessible to:

• the Publisher's authorised staff, bound by confidentiality;
• the Organisations at which you book, order, pay or work, as far as they are concerned;
• other Users, for the information you choose to share (profile, reviews, invitations, messages);
• Payment Providers, mobile money operators, aggregators and banks, for executing payments and fighting fraud;
• the Publisher's technical providers: hosting, sending of SMS, messages and emails, notifications, mapping and routing, video delivery, support and maintenance;
• administrative and judicial authorities, where required by law or to defend the Publisher's rights;
• any acquirer of all or part of the Publisher's business, in case of merger, sale or restructuring.

The Publisher does not sell your Personal data.

The Publisher implements reasonable technical and organisational measures to protect data: separation of data per Organisation, access control by profiles and privileges, encrypted communications, confirmation of sensitive operations by PIN or biometric authentication, logging of operations.

As no system is infallible, the Publisher cannot guarantee absolute security. You are responsible for keeping your PIN confidential, for the security of your device and, for Organisations, for the rights granted to their Employees. In case of a data breach presenting a risk to individuals, the Publisher makes the notifications required by applicable law.

Data may be hosted or processed by providers located outside your country of residence. In that case, the Publisher ensures that such transfers are covered by appropriate safeguards, in accordance with the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention), Cameroonian Law No. 2024/017 on personal data protection and the regulations applicable in the country concerned.

Data is kept for as long as necessary for the purposes described above:

• Account data: as long as the Account is active, then for the time needed to handle complaints and disputes;
• Operating data and staff data: for the duration of the Organisation's Plan, then for the return period set out below;
• transaction and billing data and accounting documents: for the periods required by accounting and tax law, namely ten years under OHADA law;
• security and login logs: for the time needed for the security of the Services and as evidence of operations;
• requests received through the website: for the time needed to handle them, then three years at most.

When these periods expire, data is deleted or anonymised. Some may be kept longer where the law requires it or for the establishment, exercise or defence of legal claims.

Under the conditions set by applicable law, you have a right of access, rectification, erasure, restriction and objection, the right to withdraw your consent, and a right to portability of your data.

These rights are exercised by writing to contact@joneasy.africa, stating your request and the phone number of your Account. The Publisher may ask for proof of identity, and answers within the time limits set by law. It may refuse a request that is manifestly unfounded, repetitive or that infringes the rights of third parties, and keep the data it is legally required to retain.

Where your data is processed on behalf of an Organisation (for example as an Employee or a customer of a venue), send your request to that Organisation: the Publisher will forward any request it receives.

Return of an Organisation's data. During its Plan, and for thirty days after it ends, an Organisation may request the export of its Operating data in a common format. After that period, the Publisher may delete the data, except for what it is required to keep.

Deleting an Account results in the permanent loss of the loyalty points, coupons, gift cards and benefits attached to it.

The apps request access to certain functions of your phone (location, camera, photos, contacts, notifications, biometric authentication) only when the feature in use requires it. You can withdraw these permissions at any time in the device's settings.

The joneasy.africa website does not use advertising cookies. It stores in your browser the country chosen for displaying prices. The embedded video player is supplied by a provider that may collect technical playback data. Audience measurement tools may be added; they will then be subject to your consent where the law requires it.

The Services are not intended for minors. The Publisher does not knowingly collect data about minors. Any Account identified as belonging to a minor is suspended and then deleted.

If you believe a minor is using the Services, report it to contact@joneasy.africa.

Any complaint about the processing of your data may be sent to contact@joneasy.africa. If the answer does not satisfy you, you may refer the matter to the competent data protection authority in your country of residence.

The Publisher may update this policy to reflect changes in the Services or in regulations. The version in force is the one published on the website and in the apps, with its update date. Users are informed of substantial changes before they take effect. Continued use of the Services constitutes acceptance of the amended policy.

For any question about this policy or your data: contact@joneasy.africa.