1. Who is responsible

KofKaN Store (“we,” “us”) is responsible for processing personal data described here in connection with the services we offer. For data-protection questions, use the contact channel indicated on your order, receipt, or in-app help so your message reaches the right team.

2. Information we collect

You provide directly

• Account details: for example name, username, optional email, phone number if you provide it, and password (stored in hashed form).
• Order and delivery details: shipping address, billing information as needed for payment.
• Communications: messages you send to support, feedback, or survey responses if we run them.
• Marketing preferences: for example newsletter signup if you opt in.

Collected automatically

• Technical data: device type, browser, approximate location derived from IP where available, and timestamps when you use the service.
• Usage data: pages or screens viewed, actions in the app (for example add-to-cart), and referral sources where our analytics tools support that.

3. How we use your information

• To create and secure your account and authenticate you.
• To process orders, take payment, arrange delivery or pickup, and provide customer support.
• To send transactional messages (order confirmations, shipping updates, security alerts).
• To improve our products, website, and fraud prevention, including analytics in aggregated or de-identified form where possible.
• To comply with law, respond to lawful requests, and enforce our Terms of Service.
• For marketing, only where you have opted in or where applicable law allows (for example existing-customer communications with an easy unsubscribe).

4. Newsletter, price alerts, and product updates

If you opt in to marketing emails (for example via the footer form or your account), we may send you messages about new products, restocks, and price drops. These are sent only to addresses that have completed the double opt-in flow where we use it, and you can unsubscribe at any time from the link in each email, the account newsletter screen, or the dedicated unsubscribe page. This is separate from essential messages about your orders, security, and account.

5. Legal bases (summary)

Where the law requires a “legal basis,” we rely on: performing our contract with you (orders and accounts); legitimate interests (security, analytics, improving the service, and direct marketing where balanced against your rights); consent where we ask it explicitly (for example marketing cookies or optional emails); and legal obligations where we must retain or disclose data.

6. Sharing and processors

We do not sell your personal data. We share it only as needed to run the business:

• Payment providers and banks to process transactions.
• Delivery and logistics partners to fulfil orders.
• Email, hosting, and analytics providers under contract and confidentiality obligations.
• Authorities when required by law or to protect rights and safety.

Some providers may process data outside Ghana. Where we use them, we aim to apply appropriate safeguards required by law (for example standard contractual clauses or your consent where relevant).

7. Retention

We keep data only as long as needed for the purposes above: for example order and tax records for periods required by law, account data while your account is active and for a reasonable period after closure to handle disputes, and marketing logs until you withdraw consent or unsubscribe. Security logs may be kept for a limited period to investigate abuse.

8. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit where we control the connection, access controls, and secure handling of credentials. No method of transmission over the internet is completely secure; please use a strong, unique password and protect your devices.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority where applicable. To exercise rights, contact us through the same channels you use for support; we may need to verify your identity before acting.

10. Cookies and similar technologies

We use cookies or local storage where necessary for login, preferences, cart, and security. Where we use optional analytics or marketing cookies, we will align with your choices and applicable law (for example consent banners where required).

11. Children

Our service is directed at adults. If you believe a child has provided personal data without parental consent, contact us and we will take steps to delete it where appropriate.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and adjust the “Last updated” date. For material changes, we may also notify you by email or in-app message where we can reach you.

13. Terms of Service

Use of the service is also governed by our Terms of Service.