At Iroofia Project, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website and place orders with us.
1. Who We Are
Iroofia Project is a Madagascar-based social enterprise headquartered in Antananarivo, Madagascar. We design and sell handcrafted raffia bags and accessories made by skilled women artisans.
Contact: info@iroofia.com
2. What Information We Collect
Information you provide directly:
Full name, email address, shipping address, and phone number (when placing an order or creating an account)
Payment information — processed securely via our payment provider. We do not store card details on our servers.
Messages and enquiries submitted through our contact forms
Information collected automatically:
IP address, browser type, and device information
Pages visited, time spent on the site, and referring URLs
Cookie and tracking data (see our Cookie Policy for full details)
3. How We Use Your Information
We use your personal data to:
Process and fulfil your orders and send order confirmations, shipping updates, and invoices
Respond to your enquiries and provide customer support
Improve our website, products, and services
Send you marketing emails (only with your explicit consent — you may unsubscribe at any time)
Comply with legal and tax obligations
4. Legal Basis for Processing (GDPR)
For customers in the European Union, we process your data on the following legal bases:
Contract performance: to process and fulfil your orders
Legitimate interests: to improve our services and prevent fraud
Consent: for marketing communications and non-essential cookies
Legal obligation: to comply with applicable tax and accounting requirements
5. How We Share Your Information
We do not sell your personal data. We may share it with:
Shipping carriers and logistics partners (to deliver your orders to Europe, USA, Canada, South America, Africa, Singapore, Australia, and New Zealand)
Email marketing platforms (only if you have opted in to newsletters)
Legal or regulatory authorities, if required by applicable law
6. International Data Transfers
As a Madagascar-based business serving international customers, your data may be transferred to and processed in countries outside your own. When transferring data from the EU, we ensure appropriate safeguards are in place as required by GDPR (such as Standard Contractual Clauses where applicable).
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by law (typically 5–7 years for transaction records).
8. Your Rights
Depending on your country of residence, you may have the following rights regarding your personal data:
Right to access the data we hold about you
Right to correction of inaccurate or incomplete data
Right to erasure (‘right to be forgotten’), subject to legal retention obligations
Right to restriction of processing
Right to data portability (EU customers)
Right to object to processing based on legitimate interests
Right to withdraw consent at any time (for marketing or non-essential cookies)
Right to lodge a complaint with your national data protection authority (EU customers)
To exercise any of these rights, contact us at: info@iroofia.com
9. Data Security
We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, alteration, or disclosure. All payment transactions are transmitted via SSL encryption.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The most current version will always be available on our website, with the updated effective date noted at the top.
Questions? Contact us at contact@iroofia.com