Our commitment to your privacy
This privacy policy applies to all personal data we collect when you use our website, our services, or when you interact with us. It has been updated to comply with current data protection standards.
Table of Contents
1
Data Collection
Express Groupe may collect different types of personal data about you, particularly when you use our website, subscribe to our newsletter, fill out a contact form, or interact with us through other means.
Data we collect
Identification Data
- First and last name
- Professional email address
- Phone number
- Company name
- Position or function
Technical Data
- IP address
- Browser type and version
- Device type and operating system
- Navigation and interaction data
- Cookies and similar identifiers
We do not collect sensitive data (racial or ethnic origin, political opinions, religious beliefs, health data, etc.) unless strictly necessary, with your explicit consent, and in accordance with applicable laws.
2
Data Usage
We use your personal data only for the specific purposes for which it was collected. Here are the main purposes for which we process your data:
Customer Relationship Management
- Responding to your information requests
- Executing and managing our contracts with you
- Providing the products and services requested
- Ensuring after-sales service
- Managing complaints and disputes
Communication and Marketing
- Sending you information about our services
- Informing you about events we organize
- Offering solutions tailored to your needs
- Measuring customer satisfaction
- Improving our products and services
Website Improvement
- Analyzing site traffic and usage
- Improving user experience
- Ensuring site security
- Detecting and preventing fraud
Legal Obligations
- Complying with our legal and regulatory obligations
- Responding to requests from competent authorities
- Establishing, exercising, or defending legal rights
- Ensuring compliance with applicable laws
3
Legal Basis for Processing
We process your personal data in accordance with the following legal bases:
Contract Performance
When processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.
Legal Obligations
When processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests
When processing is necessary for the purposes of the legitimate interests pursued by our company, unless those interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Consent
When you have given your consent to the processing of your personal data for one or more specific purposes.
4
Data Recipients
As part of our activities and for the purposes described above, your personal data may be shared with the following categories of recipients:
Internally
- Authorized personnel of Express Groupe
- Our subsidiaries and companies of the MEDAF Investment group
- Our commercial and technical teams
- Our administrative and financial services
Business Partners
- Our suppliers and subcontractors
- Our logistics partners
- Our IT service providers
- Our product delivery partners
Authorities
- Administrative or judicial authorities
- Regulatory bodies
- External auditors
- Other authorities when required by law
Service Providers
- Web hosting and cloud providers
- Analytics and statistics services
- Email and marketing services
- Security service providers
We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specific purposes and in accordance with our instructions.
5
International Transfers
As a company present in several West African countries (Burkina Faso, Ghana, Côte d'Ivoire, Niger, Guinea Conakry, Senegal), your personal data may be transferred and processed in these countries for the purposes mentioned above.
Transfer Safeguards
We implement appropriate safeguards to protect your data during these transfers, including:
- Contractual clauses between entities of the Express Groupe and MEDAF Investment group
- Appropriate technical and organizational security measures
- Limiting access to only authorized persons who need to access it
- Application of our data protection policy in all our offices
For any questions regarding international transfers of your data or to obtain more information about the safeguards in place, you can contact us at the email address indicated at the end of this policy.
6
Data Retention
We retain your personal data only for the time necessary to fulfill the purposes for which they were collected, in accordance with our legal and regulatory obligations.
Retention Periods
| Data Type | Retention Period | Justification |
|---|---|---|
| Customer account data | 3 years after last contact | Customer relationship management |
| Order and billing data | 10 years | Legal and accounting obligations |
| Navigation data and cookies | 13 months maximum | Site analysis and improvement |
| Prospect data | 3 years after collection or last contact | Commercial prospecting |
| Information request data | 1 year after request closure | Request follow-up |
At the end of these periods, your personal data is either deleted or irreversibly anonymized so that it can no longer be associated with you.
7
Your Rights
In accordance with applicable data protection laws, you have several rights concerning your personal data.
Right of Access
You have the right to obtain confirmation that your personal data is being processed and to obtain a copy of this data as well as certain information about this processing.
Right to Rectification
You have the right to request the correction of your personal data if it is inaccurate, incomplete, or outdated.
Right to Erasure
You have the right to request the erasure of your personal data in certain circumstances, particularly when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data in certain circumstances, for example if you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests.
How to Exercise Your Rights
To exercise any of these rights, you can contact us at the following email address: privacy@expressgroupe.com
We will endeavor to respond to your request within one month of receiving it. This period may be extended by two additional months if necessary, taking into account the complexity and number of requests.
8
Data Security
The security of your data is a priority for us. We implement appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, modification, or disclosure.
Our security measures include:
Technical Security
- Encryption of sensitive data
- Firewalls and intrusion detection systems
- Regular system updates
- Periodic security testing
- Regular backups
Organizational Measures
- Limited access to personal data
- Staff security training
- Security policies and procedures
- Strict access controls
- Security audits
Although we implement all appropriate security measures, the transmission of data over the Internet is never completely secure. We cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
10
Policy Changes
We reserve the right to modify this privacy policy at any time, particularly to comply with any regulatory, judicial, editorial, or technical developments.
Update History
When we make significant changes to this policy, we will inform you through a visible notice on our website or by email, as appropriate.
We encourage you to regularly check this policy to be aware of any changes. The changes take effect as soon as the new version is published on our website.
By continuing to use our website after the publication of changes, you accept the revised privacy policy.
Questions?
Our data protection team is here to help
For any questions regarding this privacy policy or to exercise your rights concerning your personal data, you can contact us:
- By email: privacy@expressgroupe.com
- By mail: Express Groupe, 11 BP 670 CMS OUAGADOUGOU 11, BURKINA FASO
- By phone: +226 74 04 73 73
We are committed to responding to your requests as quickly as possible and no later than one month from the receipt of your request.