1 Information We Collect

We collect various types of information to provide, maintain, and improve our Marketplace services. The information we collect falls into the following categories:

1.1 Personal Information You Provide

When you register, create a listing, make a purchase, or otherwise interact with our Platform, you may provide us with:

1.2 Information Collected Automatically

When you access or use our Platform, we may automatically collect:

1.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment status, fraud screening results
• Social Media Platforms: If you sign in using social media accounts (e.g., Facebook, Google), we may receive your name, email, and profile information
• Identity Verification Services: Results of identity and background checks for Seller verification
• Analytics Providers: Aggregated and anonymized usage statistics
• Other Users: When another user provides your information (e.g., a delivery address)
• Public Sources: Publicly available information relevant to fraud prevention and compliance

2 How We Collect Your Information

We collect information through the following methods:

2.1 Direct Interactions

• When you create an account or register on the Platform
• When you create a listing or make a purchase
• When you complete your profile or update your account information
• When you communicate with other users or our customer support team
• When you submit reviews, ratings, feedback, or comments
• When you participate in surveys, promotions, or contests
• When you subscribe to newsletters or marketing communications
• When you submit a verification request

2.2 Automated Technologies

• Cookies and similar tracking technologies
• Server logs and analytics tools
• Pixel tags and web beacons
• Mobile device sensors (with your permission)

2.3 Third-Party Sources

• Payment and financial service providers
• Social media platforms (when used for authentication)
• Identity verification and fraud prevention services
• Advertising and analytics partners
• Public databases and government records

3 How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing & Managing Our Services

• To create and manage your account
• To facilitate transactions between Buyers and Sellers
• To process payments and issue refunds
• To enable listing creation, search, and discovery
• To facilitate shipping and delivery
• To provide customer support and respond to inquiries
• To manage disputes between users

3.2 Safety, Security & Fraud Prevention

• To verify user identity and prevent fraudulent activity
• To detect, investigate, and prevent security incidents
• To enforce our Terms and Conditions and other policies
• To monitor and protect against suspicious or unauthorized transactions
• To comply with legal obligations and law enforcement requests

3.3 Improvement & Development

• To analyze usage patterns and improve the Platform's functionality
• To develop new features, products, and services
• To conduct research, surveys, and analysis
• To test and troubleshoot new features before release
• To measure the effectiveness of our services

3.4 Communication

• To send transactional notifications (order confirmations, shipping updates, payment receipts)
• To send account-related alerts (security notifications, policy updates, password resets)
• To send promotional and marketing communications (with your consent)
• To send newsletters and updates about the Marketplace
• To facilitate communication between Buyers and Sellers

3.5 Personalization

• To personalize your browsing and shopping experience
• To recommend products, services, and Sellers based on your preferences
• To display relevant advertisements and promotions
• To customize content and layout based on your usage patterns

3.6 Legal & Regulatory Compliance

• To comply with applicable laws, regulations, and legal processes
• To respond to lawful requests from public authorities
• To enforce our legal rights and defend against legal claims
• To meet tax reporting and financial regulatory requirements

4 Legal Basis for Processing

We process your personal information based on the following legal grounds, in accordance with the Data Protection Act, 2012 (Act 843) of Ghana:

5 Information Sharing & Disclosure

We value your privacy and do not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 With Other Users

To facilitate transactions, we may share:

• Buyer information with Sellers: Name, delivery address, contact information necessary for order fulfillment
• Seller information with Buyers: Business name, store location, contact information, ratings, and reviews
• Public profile information: Username, profile photo, ratings, reviews, and listing information visible to all users

5.2 With Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Platform, including:

• Payment Processors: To process payments and transactions (e.g., mobile money providers, banks, card processors)
• Cloud & Hosting Providers: To store and manage data securely
• Analytics Providers: To analyze Platform usage and performance
• Communication Providers: To send emails, SMS, and push notifications
• Customer Support Tools: To manage support tickets and inquiries
• Identity Verification Services: To verify Seller identities and prevent fraud
• Delivery & Logistics Partners: To facilitate shipping and delivery
• Marketing & Advertising Partners: To deliver targeted advertisements (with your consent)

5.3 For Legal Reasons

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, legal processes, or government requests
• Enforce our Terms and Conditions and other agreements
• Protect the rights, property, or safety of Kwaebibirem.com, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to lawful requests by public authorities, including law enforcement

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information.

5.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5.6 Aggregated & Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, analysis, marketing, or other purposes.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files that are stored on your device (computer, smartphone, or tablet) when you visit our Platform. They help us recognize your device, remember your preferences, and improve your experience.

6.2 Types of Cookies We Use

6.3 Other Tracking Technologies

In addition to cookies, we may use:

• Pixel Tags / Web Beacons: Small transparent images embedded in emails or pages to track opens, clicks, and conversions
• Local Storage: Data stored in your browser's local storage for performance and preference management
• Session Storage: Temporary data stored during your browsing session
• Device Fingerprinting: Techniques to identify devices for fraud prevention purposes

6.4 Managing Cookies

You can manage your cookie preferences in the following ways:

• Browser Settings: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some cookies, or to alert you when cookies are being set.
• Cookie Consent Banner: When you first visit our Platform, you will be presented with a cookie consent banner that allows you to accept or customize your cookie preferences.
• Opt-Out Links: Some third-party analytics and advertising services provide opt-out mechanisms on their websites.

7 Data Storage & Security

7.1 Where We Store Your Data

Your personal information is primarily stored on secure servers located in [Insert Server Location(s)]. We may also use cloud-based services that store data in multiple locations globally. Where data is transferred outside Ghana, we ensure appropriate safeguards are in place (see Section 12).

7.2 Security Measures

We implement a comprehensive range of technical, organizational, and administrative security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction, including:

Technical Measures:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest (AES-256 or equivalent)
• Secure password hashing (bcrypt or similar)
• Firewalls and intrusion detection/prevention systems
• Regular security patches and software updates
• Two-factor authentication (2FA) options for user accounts
• Secure API communications
• Regular vulnerability assessments and penetration testing

Organizational Measures:

• Access controls and role-based permissions (principle of least privilege)
• Employee training on data protection and security
• Confidentiality agreements for all staff and contractors
• Incident response and data breach management procedures
• Regular security audits and reviews
• Data processing agreements with third-party service providers

7.3 Payment Security

We do not directly store complete payment card details on our servers. Payment information is handled by PCI-DSS compliant payment processors. We may store tokenized or partial payment information for transaction reference purposes.

8 Data Retention

8.1 Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

8.2 After Retention Period

When personal information is no longer required, we will:

• Securely delete or destroy the data
• Anonymize the data so it can no longer identify you (for statistical or analytical purposes)
• Archive the data in a secure, restricted-access environment where required by law

8.3 Account Deletion

You may request deletion of your account and personal data at any time (see Section 9). Please note that certain data may be retained as required by law or for legitimate business purposes, even after account deletion.

9 Your Rights & Choices

Under the Data Protection Act, 2012 (Act 843) and applicable data protection laws, you have the following rights regarding your personal information:

9.1 How to Exercise Your Rights

To exercise any of the above rights, you may:

• Email us at [Insert Email Address] with the subject line "Data Privacy Request"
• Use the privacy settings and tools available in your account dashboard
• Write to our Data Protection Officer at the address provided in Section 18

9.2 Verification

To protect your privacy, we may need to verify your identity before processing your request. We may ask you to provide additional information to confirm your identity.

9.3 Response Time

We will respond to your request within 30 days of receiving it. If the request is complex or we receive a large number of requests, we may extend this period by an additional 30 days, in which case we will notify you.

9.4 Fees

We will generally process your requests free of charge. However, we may charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive.

10 Children's Privacy

10.1 Age Restriction

Kwaebibirem.com is not intended for use by children under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18 without verifiable parental or guardian consent.

10.2 Parental Consent

If a child under 18 wishes to use the Platform, they must do so under the supervision and with the consent of a parent or legal guardian. The parent or guardian assumes all responsibility for the child's use of the Platform.

10.3 Discovery of Minor's Data

If we become aware that we have collected personal information from a child under 18 without appropriate parental consent, we will take immediate steps to delete such information from our servers. If you believe that we may have collected information from a child under 18, please contact us immediately at [Insert Email Address].

11 Third-Party Links & Services

11.1 External Links

Our Platform may contain links to third-party websites, applications, or services that are not owned or controlled by Kwaebibirem.com. These may include:

• Payment processor websites
• Social media platforms
• Seller's external websites or stores
• Advertising partner sites
• Delivery and logistics service providers

11.2 No Responsibility

We are not responsible for the privacy practices, content, or security of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.

11.3 Third-Party Integrations

When you use third-party services integrated into our Platform (e.g., payment gateways, social media login), those services may collect information independently. Their use of your information is governed by their own privacy policies.

12 International Data Transfers

12.1 Cross-Border Transfers

Your personal information may be transferred to, stored, and processed in countries other than Ghana where our servers, service providers, or partners are located. These countries may have data protection laws that differ from those in Ghana.

12.2 Safeguards

When we transfer your personal data internationally, we ensure appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to protect your data to the same standard as required under Ghanaian law
• Ensuring the recipient country has adequate data protection legislation
• Obtaining your explicit consent for the transfer where required
• Implementing additional technical and organizational security measures
• Data processing agreements with all international service providers

12.3 Your Consent

By using the Platform and providing your personal information, you consent to the transfer of your data to countries outside Ghana, subject to the safeguards described above.

13 Seller & Buyer Specific Privacy

13.1 For Sellers

If you are a Seller on Kwaebibirem.com, please note:

• Public Profile: Your business name, store description, location, ratings, reviews, and listing information will be publicly visible on the Platform.
• Verification Data: We may collect additional identity and business verification documents. These are stored securely and used solely for verification and compliance purposes.
• Transaction Data: We collect and process detailed transaction data, including sales volume, revenue, payout history, and fee records.
• Buyer Information: You will receive Buyer contact and delivery information necessary to fulfill orders. You must handle this information responsibly and only use it for order fulfillment purposes.
• Seller Obligations: As a Seller, you are prohibited from using Buyer personal information for any purpose other than completing the transaction. You must not sell, share, or misuse Buyer data.

13.2 For Buyers

If you are a Buyer on Kwaebibirem.com, please note:

• Order Information: Your name, delivery address, and contact information will be shared with the Seller to facilitate delivery of your order.
• Payment Information: Your payment details are processed by our secure payment partners and are not shared with Sellers.
• Reviews & Ratings: Any reviews or ratings you leave will be publicly visible alongside your username or display name.
• Purchase History: Your purchase history is stored in your account and is accessible only to you and Kwaebibirem.com (not shared with other users or Sellers unless required for dispute resolution).

13.3 User-to-User Communication

Messages exchanged between Buyers and Sellers through the Platform's messaging system may be monitored and stored for safety, security, and dispute resolution purposes. Users should not share sensitive personal information (such as financial details) through the messaging system.

14 Communication & Marketing

14.1 Transactional Communications

We will send you transactional communications related to your use of the Platform, including:

• Account registration and verification confirmations
• Order confirmations and status updates
• Payment receipts and invoices
• Shipping and delivery notifications
• Password reset and security alerts
• Policy updates and changes to our Terms

These communications are necessary for the operation of the Platform and cannot be opted out of while you maintain an active account.

14.2 Marketing Communications

With your consent, we may send you marketing communications, including:

• Promotional offers and discounts
• New features and product announcements
• Newsletters and marketplace updates
• Personalized recommendations
• Survey and feedback requests
• Event invitations

14.3 Opting Out of Marketing

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at [Insert Email Address]
• Replying "STOP" to any marketing SMS message

14.4 Push Notifications

If you use our mobile application, you may receive push notifications. You can manage push notification preferences through your device settings or the app settings.

15 Data Breach Notification

15.1 Our Commitment

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we are committed to:

• Notifying the Data Protection Commission of Ghana within 72 hours of becoming aware of the breach, where feasible
• Notifying affected users without undue delay when the breach is likely to result in a high risk to their rights and freedoms
• Providing clear and transparent information about the nature of the breach, the data affected, and the measures being taken

15.2 Breach Notification Content

Our breach notification to affected users will include:

• A description of the nature of the personal data breach
• The categories and approximate number of individuals affected
• The categories and approximate number of data records affected
• A description of the likely consequences of the breach
• A description of the measures taken or proposed to address the breach
• Recommendations for steps you can take to protect yourself
• Contact information for our Data Protection Officer

15.3 Incident Response

We maintain a comprehensive incident response plan that includes:

• Immediate containment and assessment of the breach
• Investigation into the cause and scope of the breach
• Notification to relevant authorities and affected individuals
• Remediation measures to prevent future breaches
• Post-incident review and policy updates

15.4 Reporting a Suspected Breach

If you suspect a data breach or unauthorized access to your personal information, please report it immediately to [Insert Email Address] or contact our Data Protection Officer.

16 Changes to This Privacy Policy

16.1 Right to Update

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations.

16.2 Notification of Changes

We will notify you of significant changes by:

• Posting the revised Privacy Policy on the Platform with an updated "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice or banner on the Platform
• In-app notifications (for mobile app users)

16.3 Acceptance of Changes

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue using the Platform and may request deletion of your account and personal data.

16.4 Review Recommendation

17 Governing Law

17.1 Applicable Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Ghana, including but not limited to:

• Data Protection Act, 2012 (Act 843)
• Electronic Transactions Act, 2008 (Act 772)
• National Communications Authority Act, 2008 (Act 769)
• Any other applicable data protection regulations and guidelines issued by the Data Protection Commission of Ghana

17.2 Jurisdiction

Any disputes arising from or related to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of competent jurisdiction in Ghana.

17.3 Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable under applicable law, the remaining provisions shall remain in full force and effect.

📌 Regulatory Authority

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority: