Privacy Policy & GDPR

Last updated: September 29, 2026

Beninfitaddict (fitness coaching, shop and ebooks, based in Abomey-Calavi, Benin) respects your privacy. This policy explains what data we collect on beninfitaddict.com, why, how long we keep it and what your rights are, under the Digital Code of Benin and, for people located in the European Union, the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is Beninfitaddict (see the Legal Notice for full identification), reachable at contact@beninfitaddict.com.

2. Data we collect

We only collect data you give us or that the site needs to work:

  • Customer account: name, email address, password (stored encrypted), phone and WhatsApp if you provide them. If you sign in with Google, we receive your name, email and profile picture.
  • Orders: name, email, phone, shipping address, country, purchased items, amount, chosen payment method and the Mobile Money number used for payment.
  • Contact form: name, email, phone (optional), subject and message.
  • Newsletter: email address, name (optional) and language.
  • Security checks (see the KYC Policy): ID or supporting documents, only if we ask for them for an unusual transaction.

3. Payments

Payments are processed by our provider PayDunya. For cards, you enter your details directly in PayDunya’s secure payment window, opened on our site: we never see or store your card number. For Mobile Money, we pass your number to PayDunya to trigger the payment request; the one-time payment code (OTP) required by some operators is sent once and never stored. We never ask for your Mobile Money PIN. We only keep the transaction reference and its status.

4. Why we use your data (purposes and legal bases)

  • To process, collect payment for and deliver your orders, and send payment confirmation, cancellation or failure emails — performance of the contract.
  • To manage your account and order history — performance of the contract.
  • To answer your messages and booking requests — legitimate interest / pre-contractual steps.
  • To send you the newsletter, only if you subscribed — consent, which you can withdraw at any time.
  • To prevent fraud, secure transactions and meet our anti-money-laundering obligations — legal obligation and legitimate interest.
  • To keep our accounts — legal obligation.

5. Recipients, providers and transfers

Your data is never sold. It is accessible to the Beninfitaddict team and only shared with the providers the site needs: Vercel (website hosting), Supabase (database), PayDunya and payment operators (payments), Google (Sign in with Google), our email delivery provider, and the courier for physical products (name, phone, address).

Some providers store data outside Benin and outside the European Union (notably in the United States). These transfers are covered by the contractual safeguards offered by these providers.

We may be required to disclose data to the competent authorities (for example the CENTIF) when the law requires it.

6. Cookies and local storage

We only use technical cookies required by the site: a session cookie to keep you signed in and a language cookie. Your cart is saved in your browser’s local storage. We use no advertising cookies or third-party tracking tools, so no consent is required for these cookies.

7. Retention

  • Customer account: as long as your account exists, then deleted on request.
  • Orders and transactions: 10 years, for our accounting and anti-money-laundering obligations.
  • Contact messages: 3 years after the last exchange.
  • Newsletter: until you unsubscribe.
  • KYC documents: 10 years after the transaction concerned.

8. Security

The site is served over HTTPS only, passwords are encrypted, data access is restricted to authorized people and every payment is re-verified directly with PayDunya. See also the Transaction Security Policy.

9. Your rights

Under the Digital Code of the Republic of Benin (Law No. 2017-20) and, if you are in the European Union, the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time (newsletter).

To exercise these rights, email contact@beninfitaddict.com. We reply within one month. You may also lodge a complaint with Benin’s Personal Data Protection Authority (APDP) or, if you live in the European Union, with your country’s authority (in France, the CNIL).

10. Minors

Purchases on the site are reserved for adults or minors with the permission of their legal guardian.

Questions about your data? Email us at contact@beninfitaddict.com