Privacy Policy

Who we are

Africa's Popup Shop is a global directory of African fashion popups. This policy explains how we handle personal information when you browse, submit a listing, sign up for alerts or contact us.

What we collect

• Alerts: your email address, optional phone number and city/country preference. We record email consent and SMS consent separately, including the wording and the time you agreed. A phone number is not required for email alerts.
• Popup submissions: organizer/designer details, contact email, event information, links and any images you provide. Listing details may become public after review; your contact email is not part of the public listing.
• Contact and removal requests: your name, reply email, request details and any listing or account information you choose to provide.
• Admin accounts: sign-in identity supplied by the login provider, account identifiers, access roles and security/audit records. Google handles your Google password; we do not receive it.
• Designer research: Instagram usernames, profile links, business details and notes from our internal research list. Designer email addresses and phone numbers are private and admin-only, never shown publicly.
• Technical information: hosting, authentication and connected services may process IP addresses, request/device information and security logs. Sign-in storage is used for admin sessions.

Instagram content and attribution

Today, admins can submit public post links, captions, messages and screenshots for review. Meta's official Instagram API integration is planned, not currently connected.

When enabled and permitted by Meta, we will use its official APIs to identify upcoming popups from public posts and captions from designer business/creator accounts, hashtag posts, and messages sent to our Instagram account. Messages are not treated as public posts; we do not publish private message text or private contact details. Listings credit and link to the original account and original post when available. Every captured listing needs admin approval. Designers and anyone whose content appears can request removal at any time.

Why we use information

We use it to identify, review and list popups; maintain the designer research list; record and send only the alerts you requested; answer requests; and keep the service secure. We do not sell personal data, or share subscriber contact details with designers for their own marketing. Collecting alert preferences does not mean messages are already being sent: email/SMS delivery providers have not yet been connected.

Where applicable, alert processing is based on your consent. Operating the directory, reviewing listings and protecting the service relies on our legitimate interests, while certain records may be kept to meet legal obligations.

Services that process information

We use Lovable Cloud for hosting, the database and authentication; Google for our private internal designer list and Google admin sign-in; and Lovable's AI service to extract draft event details from submitted content. Meta/Instagram is a content source and will process information through its official APIs when that integration is enabled. Future email and SMS providers will receive only the information needed to deliver requested alerts and process opt-outs. We will update this policy when those providers are selected.

These services may process data in countries other than your own, under their terms and applicable data-protection safeguards. Public event information and attribution links are visible to site visitors; private subscriber, research-contact and request information is restricted to authorized administration.

Retention and security

We keep alert preferences while your subscription is active, and consent/opt-out records as needed to honor your choices and meet legal obligations. Event and source records are kept while useful for listing, review and corrections; designer research records are kept while useful to the directory. Removing a designer from our research sheet pauses watching rather than automatically deleting the record.

We review information when it is no longer needed and delete or anonymize it, subject to necessary security, legal and opt-out records. Resolved contact/removal requests are kept only as needed to document our response. Limited backups or provider logs may remain until their normal expiry. We use restricted admin access and access controls, but no service can guarantee absolute security.

Your choices and rights

You can withdraw alert consent at any time. When email delivery is enabled, alert emails will include an unsubscribe link; when SMS delivery is enabled, reply STOP to opt out. Until then, or if either option does not work, use our contact form and choose “Unsubscribe from alerts.” Email and SMS choices are independent.

You can ask for access, correction or deletion through the contact form. Depending on your location, you may also have rights to restrict or object to processing, receive a portable copy, or complain to a data-protection authority. We may ask for proportionate verification before sharing or deleting information. See our User Data Deletion Instructions for details; we aim to complete verified requests within 30 days.

Contact and policy updates

Use our contact form for privacy questions or requests. A personal email address is not published.

Business email: not yet added. Please use the contact form.

We will update this page when our practices change and revise the date above. Material changes to consent-based processing will be communicated where required.