Who we are

RAPPI Sports Hub is an independent sportswear and equipment store based in Windhoek, Namibia. We operate the website rappisportshub.com and the RAPPI Sports Hub mobile app, and we are responsible for the personal data described here.

What we collect

• Account details: your email address, name and password (stored hashed by our authentication provider). If you sign in with Google, we receive your name and email from Google.
• Order details: name, email, phone number, delivery address, city, country, delivery method, notes, the items you bought and the amounts paid.
• Payment records: a payment reference, amount, status and the name and email given at checkout. Card numbers are entered on our payment provider's page and never reach us.
• Team kit quotes: the name, email, organisation, sport, number of players, sizes and notes you send through the quote form.
• Notifications: if you turn on order notifications, a device or browser push token linked to your account.
• Device storage: your bag, wishlist, sign-in session and market preference (Namibia or EU) are saved on your device so they survive a restart.
• Website analytics: on the website only, the Meta Pixel records page views and shopping events (such as viewing a product or completing a purchase) using cookies.

How we use it

• To create and run your account and let you sign in on the website and the app.
• To take payment, fulfil and deliver your order, and email your invoice.
• To send order status notifications you have switched on.
• To answer team kit quote requests and other messages.
• To keep accounting and tax records we are legally required to keep.
• To measure and improve our advertising on Meta (website only).
• To prevent fraud and keep the service secure.

Who we share it with

We do not sell your personal data. We share it only with the service providers that run the store for us, and only what each needs:

• Supabase: account sign-in and our database (accounts, orders, quotes, push tokens).
• Vercel: hosts the website and the server the app talks to.
• DPO Pay (3G Direct Pay): processes card payments.
• Resend: delivers invoice emails.
• Google: only if you choose to sign in with Google.
• Expo and Apple/Google push services: deliver app notifications. Web browsers' push services deliver website notifications.
• Meta: receives website shopping events through the Meta Pixel, and, after a purchase, a hashed (scrambled) copy of your email and first name with the order value so we can measure ads. The app does not send data to Meta.

International transfers

Some of these providers store or process data outside Namibia, including in the European Union and the United States. Where the GDPR applies, we rely on our providers' standard contractual clauses or equivalent safeguards.

How long we keep it

• Account data: until you delete your account.
• Orders, payments and invoices: as long as tax and accounting law requires, even after an account is deleted. These records are unlinked from the deleted account.
• Team kit quotes: as long as needed to answer and follow up on the request.
• Push tokens: until you turn notifications off, sign out, delete your account, or the token stops working.
• Device storage: until you sign out, clear it, or uninstall the app.

Deleting your account

In the app, go to Account and tap Delete account. On the website, sign in and open rappisportshub.com/account/delete. This permanently deletes your account and the personal data linked to it, apart from the order records we must keep by law.

You can also ask us to delete your account without the app by emailing us from the address on your account. We confirm by email once it's done.

Your rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it. If you are in the European Union, you have these rights under the GDPR and may also complain to your local data protection authority. Withdraw notification permission at any time in your device or browser settings.

Cookies and similar technology

The website uses cookies and local storage to keep you signed in, remember your bag, wishlist and market, and, through the Meta Pixel, to measure advertising. You can block or clear cookies in your browser; the store still works, but you may need to sign in again.

Children

The store is not aimed at children under 13, and we do not knowingly collect their data. Parents can contact us to have a child's data removed.

Security

Data travels over HTTPS. Database access is restricted so each customer can read only their own orders, and payment secrets stay on our server. No system is perfectly secure, but we limit what we collect and who can see it.

Changes

We will update this page when our practices change and revise the date at the top. For significant changes, we will tell account holders by email or in the app.

Contact

Questions or requests about your data? Email us at sales@rappisportshub.com.