About Our Privacy Policy

1. Introduction

Kobikoba (“we,” “us,” “our,” or “the Platform”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our website at [yourplatform.com] (the “Platform”).
Because we operate as a marketplace that connects buyers with independent shop owners, it’s important to understand that certain personal data — such as your order details, payment information, and shipping address — is collected and processed directly by the Sellers you transact with. This policy covers our own data practices; Seller practices are governed by their own privacy policies.
Please read this policy carefully. By using the Platform, you acknowledge the practices described below.

2. Data Controller

The data controller responsible for your personal data is:
[Your Company Name] [Registered address] [Company registration number] Email: [privacy@yourplatform.com]

3. Personal Data We Collect

3.1 Information You Provide Directly

  • Account information — name, email address, password (stored in hashed form), and username when you register;
  • Profile information — profile picture, bio, or preferences you choose to add;
  • Communications — messages, support requests, complaints, and abuse reports you submit to us;
  • Seller information — if you register as a Seller: business name, contact details, payout information, and verification documents (e.g., ID, business registration);
  • Feedback and reviews — comments or ratings you post on the Platform.

3.2 Information Collected Automatically

  • Usage data — pages visited, links clicked, search queries, time spent on pages;
  • Device data — IP address, browser type and version, operating system, device identifiers, screen resolution;
  • Location data — approximate location derived from your IP address (not precise GPS location);
  • Log data — timestamps, error reports, crash logs, referral source.

3.3 Information from Cookies

We use cookies and similar technologies as described in our [Cookie Policy]. This includes strictly necessary cookies, preference cookies, and analytics cookies.

3.4 Information We Do NOT Collect

Because we do not process payments on the Platform:
  • We do not collect or store your credit/debit card numbers, bank details, or payment credentials;
  • We do not have access to transaction records between you and Sellers.
Payment data is handled solely by Sellers and their chosen payment providers. Please exercise caution when sharing payment details and only use secure, trusted payment methods.

4. How We Use Your Personal Data

We process personal data on the following legal bases (where applicable under GDPR or similar laws):
Table
 
 
Purpose Data Used Legal Basis
Providing and operating the Platform Account data, usage data Performance of contract
Maintaining platform security and preventing fraud IP address, device data, logs Legitimate interest / legal obligation
Processing complaints and abuse reports Communications, account data Legitimate interest / legal obligation
Verifying Seller identity Seller documents, business data Legal obligation / legitimate interest
Improving the Platform (analytics, debugging) Usage data, device data Consent / legitimate interest
Sending service notifications (account verification, security alerts) Email, account data Legitimate interest
Sending marketing communications (optional) Email, preferences Consent (withdrawable at any time)
Complying with legal obligations Any data as required by law Legal obligation
We do not sell your personal data.

5. How We Share Personal Data

We may share personal data in the following circumstances:

5.1 With Sellers (Limited)

If you interact with a Seller — for example, by placing an inquiry, leaving a review, or filing a complaint about a transaction — we may share the information necessary to resolve the issue, such as your username, the content of your report, and relevant order context. We do not share your email address, payment details, or private account data with Sellers unless you explicitly direct us to.

5.2 Service Providers

We work with third-party providers who process data on our behalf under data processing agreements, including:
  • Cloud hosting and infrastructure providers;
  • Analytics services (e.g., Google Analytics);
  • Email delivery services;
  • Customer support tools.

5.3 Legal Authorities

We may disclose data where required by law, court order, or governmental request, or to protect our rights, safety, or the safety of others — including investigating fraud, abuse, or illegal activity reported through our complaint system.

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy’s protections.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:
  • Encryption of data in transit (HTTPS/TLS) and at rest;
  • Password hashing;
  • Access controls limiting data access to authorized personnel;
  • Regular security reviews and monitoring;
  • Incident response procedures.
However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:
  • Account data — for the life of your account, plus up to 30 days after deletion (for recovery), unless legal obligations require longer retention;
  • Complaints and abuse reports — up to 24 months after resolution, to identify repeat offenders;
  • Seller verification documents — for the duration of the Seller account, plus any period required by law;
  • Analytics data — aggregated or anonymized where possible; raw logs retained up to 12 months;
  • Legal holds — data may be retained longer where required for disputes, investigations, or legal compliance.

8. Your Rights

Depending on your jurisdiction (including if you are in the EU/EEA, UK, or California), you may have the following rights:
  • Access — request a copy of the personal data we hold about you;
  • Rectification — request correction of inaccurate or incomplete data;
  • Erasure — request deletion of your data (“right to be forgotten”), subject to legal exceptions;
  • Restriction — request that we limit how we process your data;
  • Portability — receive your data in a structured, machine-readable format;
  • Objection — object to processing based on legitimate interests or direct marketing;
  • Withdraw consent — where we rely on consent, withdraw it at any time (without affecting prior lawful processing);
  • Non-discrimination (California) — we will not discriminate against you for exercising your privacy rights;
  • Complaint — lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at [privacy@yourplatform.com]. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before fulfilling your request.

9. International Data Transfers

Your data may be processed in countries other than your own, including where our service providers operate. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses or transfer to countries with adequate protection as recognized by applicable law.

10. Children’s Privacy

The Platform is not intended for use by children under the age of 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it promptly.

11. Third-Party Links and Seller Practices

The Platform contains listings and content created by independent Sellers, who may link to external websites or collect their own data (for example, when you complete a purchase or make a payment directly with them). We are not responsible for the privacy practices of Sellers or third-party websites. We encourage you to review their privacy policies before sharing personal information with them.

12. Changes to This Privacy Policy

We may update this policy from time to time. We will post the revised version on this page with an updated “Last updated” date and, for significant changes, provide notice through the Platform or by email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:
If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., your national data protection authority in the EU/UK, or the California Privacy Protection Agency in California).