This policy guide is effective from 28 December 2024

Introduction

At Kornabay, we recognize that privacy is a fundamental right and a crucial aspect of maintaining trust with our users. As an e-commerce platform, we are committed to safeguarding the personal information of our users and ensuring that their data is handled with the utmost care. This privacy policy aims to outline our practices regarding the collection, use, and protection of user data while utilizing our services. The importance of privacy on our platform cannot be overstated. In today’s digital landscape, users are increasingly aware of their personal information and how it may be utilized by online services. At Kornabay, we prioritize transparency in our operations and strive to provide our users with a safe shopping environment. We believe that understanding how we manage user data is essential for our customers to make informed decisions regarding their privacy. Kornabay is fully committed to complying with both local and international laws concerning data protection. Our policies are designed to align with regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), which set high standards for data privacy. By adhering to these guidelines, we ensure that our users are afforded necessary rights and protections over their personal information. We take a proactive approach to data security, employing advanced technology and best practices to safeguard our systems against unauthorized access and data breaches. Our commitment to privacy extends beyond compliance; it is an integral part of our business philosophy. As we continue to grow and evolve, we will remain dedicated to protecting our users’ privacy and fostering a secure e-commerce experience for all.

Information We Collect

At Kornabay, we collect various types of personal data from our users to enhance their shopping experience and ensure the smooth operation of our services. The information we gather can be broadly categorized into several types, including but not limited to names, addresses, payment information, and browsing behavior. When users register for an account on our platform, we ask for personal details such as their full name, email address, and shipping address. This information is vital for processing orders and delivering products efficiently. Additionally, during the checkout process, we collect payment information, which may include credit card details, billing addresses, and other financial data necessary for transaction processing. We prioritize the security of this sensitive information and utilize encryption technology to protect it during transmission. Furthermore, we also gather data related to users’ browsing behavior on our website. This includes information about the pages visited, products viewed, and the time spent on our site. We obtain this data primarily through the use of cookies and similar tracking technologies, which allow us to analyze user interactions and preferences. Cookies help us remember user settings, provide personalized content, and improve overall site functionality. In addition to direct data collection during account registration and transactions, we may also receive information from third-party sources, such as social media platforms or analytics providers. This supplemental data helps us understand user demographics and enhance our marketing efforts. By collecting this information, Kornabay aims to create a seamless and personalized shopping experience, catering to the unique needs of each user while maintaining the highest standards of data protection and privacy.

How We Use Your Information

At Kornabay, the information we collect from our users serves multiple essential purposes that enhance not only the overall shopping experience but also the operational efficiency of our services. Understanding how we use your information can help you appreciate the measures we take to ensure your privacy and security. One of the primary uses of user information is for order processing. When you make a purchase, we utilize your personal details, such as your name, shipping address, and payment information, to fulfill your order accurately and efficiently. This process includes confirming the transaction, preparing items for shipment, and providing you with updates on your order status. Customer support is another critical area where user information is employed. When users reach out to our support team, we may refer to their account details and order history to provide tailored assistance. This approach allows us to resolve issues promptly and ensure a satisfactory experience for our customers. In addition to these operational uses, Kornabay also leverages user information for marketing communications. By analyzing browsing behavior and purchase history, we can create targeted marketing campaigns that resonate with our users. This may include personalized offers, product recommendations, and newsletters tailored to individual preferences. However, we prioritize user choice and ensure that all marketing communications comply with applicable regulations, allowing users to opt-out at any time. Finally, we are committed to compliance with legal obligations, which may require us to retain and use certain user information. This can include responding to legal requests, enforcing our terms and conditions, and protecting the rights and safety of our users and the public. By utilizing your information in these ways, Kornabay aims to create a secure, efficient, and personalized shopping experience while respecting your privacy and safeguarding your data at all times.

Data Sharing and Disclosure

At Kornabay, we understand the importance of maintaining user privacy, which extends to the sharing and disclosure of personal data with third parties. While we prioritize data protection, there are specific circumstances in which we may share personal information to ensure seamless service delivery and compliance with legal obligations. One primary instance of data sharing occurs when we engage third-party service providers, such as payment processors, delivery services, and IT support. These partners assist us in fulfilling orders, processing payments, and maintaining our platform’s functionality. When sharing data with these providers, we ensure that they adhere to strict confidentiality and security standards. We only provide the necessary information required for them to perform their designated functions, thereby minimizing any potential exposure of personal data. In addition to service providers, we may be required to share user information with compliance authorities or legal entities. This can happen in response to lawful requests, such as subpoenas or court orders, or to comply with applicable laws and regulations. In such cases, we prioritize transparency and will inform users whenever feasible, unless prohibited by law. User consent plays a crucial role in our data sharing practices. We ensure that users are informed about how their data may be shared at the point of collection and through our privacy policy. For certain types of information sharing, such as marketing partnerships or promotional collaborations, we explicitly seek user consent before proceeding. Users maintain the right to withdraw consent at any time, and we will respect their choices by ceasing any further data sharing activities related to that consent. By clearly outlining these practices, Kornabay aims to foster trust with our users while ensuring compliance with relevant regulations and maintaining a secure environment for all transactions.

User Rights and Choices

Under Ghanaian law and international regulations such as the General Data Protection Regulation (GDPR), users are granted several rights regarding their personal data. These rights empower individuals to have greater control over their information and how it is processed by organizations, including e-commerce platforms like Kornabay. One of the fundamental rights is the right to access personal data. Users have the ability to request information about the data that Kornabay holds about them. This includes details about how the data was collected, the purposes for which it is being used, and the recipients with whom the data may be shared. Kornabay is committed to providing this information in a clear and understandable manner, fostering transparency and trust. Another crucial right is the right to correction. Users have the ability to request corrections to their personal data if they believe that any information held by Kornabay is inaccurate or incomplete. This ensures that users can maintain the accuracy of their information, which is vital for effective communication and service delivery. The right to deletion, often referred to as the “right to be forgotten,” allows users to request the removal of their personal data from Kornabay’s records under certain circumstances. This right is particularly important for individuals who wish to withdraw consent for data processing or who no longer require their data to be retained. Lastly, users possess the right to opt-out of communication. Kornabay respects users’ preferences concerning marketing communications and offers clear options for individuals to unsubscribe from newsletters or promotional materials. This empowers users to choose the nature and extent of their engagement with the platform. By affirming these rights, Kornabay demonstrates its commitment to user empowerment and aligns with both local and international data protection standards, ensuring that personal information is handled with care and respect.

Data Security Measures

At Kornabay, we take the protection of user data seriously, implementing a comprehensive array of technical and organizational measures designed to safeguard against unauthorized access, disclosure, or loss of personal information. Our approach is multifaceted, encompassing stringent encryption protocols, robust access controls, and regular security assessments. One of the key technical measures we employ is data encryption. During data transmission, we utilize industry-standard encryption protocols such as TLS (Transport Layer Security) to ensure that sensitive information, including payment details and personal identifiers, is securely transmitted over the internet. This means that even if data were intercepted, it would be nearly impossible for unauthorized parties to decipher it. Additionally, we encrypt sensitive data stored in our databases, providing an additional layer of security against potential breaches. Access controls are another critical component of our data security strategy. We implement role-based access controls (RBAC), which restrict access to user data based on the specific roles and responsibilities of our employees. This minimizes the risk of data exposure by ensuring that only authorized personnel can access sensitive information necessary for their duties. Furthermore, all access to user data is logged and monitored, allowing us to detect and respond to any unauthorized access attempts in real time. Regular security assessments form an integral part of our data protection measures. We conduct frequent vulnerability assessments and penetration testing to identify potential weaknesses in our systems. These assessments are complemented by ongoing security training for our employees, ensuring that they are aware of the latest threats and best practices for maintaining data security. Through this proactive approach, Kornabay continuously enhances its defenses, adapting to the ever-evolving landscape of cyber threats. By employing these robust technical and organizational measures, Kornabay strives to create a secure environment for our users, protecting their personal information against unauthorized access and ensuring their trust in our e-commerce platform.

Changes to This Privacy Policy

At Kornabay, we recognize that privacy is a dynamic and evolving area, which is why we may update our privacy policy from time to time. Changes to this policy may occur due to modifications in our business practices, technological advancements, or legislative developments affecting data protection laws. We aim to keep our users informed and engaged throughout this process. When significant changes are made to the privacy policy, we will communicate these updates through various channels. Users can expect to receive notifications via email, provided they have opted in to receive communications from us. Additionally, we will post a prominent notice on our website, ensuring that the updated policy is easily accessible and visible to anyone who visits our platform. This notice will include a summary of the changes made, helping users understand how the updates may impact their rights and the handling of their personal information. We also encourage our users to regularly review the privacy policy, as this document is crucial for understanding our data practices and policies. By staying informed, users can make educated decisions about their engagement with our platform and how their information is handled. The latest version of the privacy policy will always be available on our website, allowing you to easily access the most current information. Your trust is important to us, and we are committed to transparency regarding our data practices. Regularly reviewing the privacy policy ensures that you remain aware of any changes and can exercise your rights concerning your personal information. We appreciate your cooperation and understanding as we strive to maintain a secure and trustworthy environment for all our users.

Contact Information

At Kornabay, we are committed to addressing any concerns or questions you may have regarding our privacy policy and practices. We believe that open communication is essential to fostering trust and transparency with our users. If you have any inquiries related to your personal data, privacy rights, or any aspect of our data handling procedures, we encourage you to reach out to us directly. You can contact us via email at policy@kornabay.com. Our dedicated team is available to assist you with any privacy-related concerns and will respond to your inquiries in a timely manner. We understand that your privacy is important, and we are here to ensure that your questions are addressed comprehensively.

For more formal correspondence, you may also reach us at our trading address:

Kornabay

28 Winchelsea Road

Eastbourne

East Sussex

BN227PR

United Kingdom

Whether you are seeking clarification on our privacy policy, wish to exercise your rights regarding your personal information, or have any other privacy-related questions, we are committed to providing you with the support you need. Your satisfaction and understanding of our privacy practices are our top priorities, and we look forward to assisting you.