Privacy Policy
Template version 2026-01 — GDPR-aligned baseline; adapt to each country's data-protection law (e.g. Nigeria NDPA, Kenya DPA 2019, South Africa POPIA, Ghana DPA 2012) before launch.
What we collect
Account data (name, email, role), profile data you choose to add, listing content, messages sent on the platform, verification documents you submit for KYC, and technical data limited to what security requires. We practice data minimization: we hash IP addresses rather than storing them raw, and we do not collect data we do not need.
Why we process it
To operate the marketplace (contract), verify identities and prevent fraud (legitimate interest / legal obligation), send service notifications (contract), and, only with your consent, marketing communications and analytics cookies.
Your rights
You may access, correct, export, or delete your personal data, withdraw consent, and object to processing. Submit requests to [email protected]. Account deletion requests are processed within 30 days; some records (e.g. audit logs required for fraud prevention or legal compliance) may be retained as permitted by law.
Retention
Account data is kept while your account is active. Verification documents are retained only as long as required for compliance. Audit logs are retained for [24 months — configure per jurisdiction]. Messages are deleted [12 months] after account closure.
Cookies and consent
Strictly necessary cookies (session, security) require no consent. Analytics or marketing cookies are set only after you opt in via the consent banner, and your choice is recorded and revocable.
International transfers and security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Where data crosses borders we use appropriate safeguards. Contact our data protection contact at [email protected].