Xonbay Privacy Policy

This Privacy Policy describes how Xonbay processes personal data when people visit the platform, create accounts, operate stores, browse products, place orders, contact support or use related services.

1. Create and secure accounts.
2. Provide storefronts, product discovery, checkout and order management.
3. Connect buyers and sellers and support fulfilment.
4. Process or reconcile payments through payment providers.
5. Prevent fraud, abuse and security incidents.
6. Provide customer support and resolve disputes.
7. Measure, maintain and improve the platform.
8. Send service communications and, where permitted, marketing.
9. Comply with law, court orders and regulatory obligations.

Depending on the context and applicable law, processing may be based on performance of a contract, legal obligations, consent, legitimate interests, protection of vital interests or another lawful basis.

Xonbay should apply accountability, lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality when processing personal data.

Xonbay may act as a data controller for platform accounts, security, analytics, support and marketplace operations. A seller may independently act as a controller for customer data it uses to fulfil orders, provide support, issue warranties, maintain legally required records or conduct its own permitted marketing.

Where Xonbay processes personal data solely on a merchant’s documented instructions, the Data Processing Agreement may apply.

1. With the buyer or seller involved in a transaction.
2. With payment, identity-verification, fraud-prevention and financial-service providers.
3. With hosting, storage, communications, analytics and customer-support providers.
4. With delivery and fulfilment partners selected for an order.
5. With professional advisers, insurers, auditors and corporate transaction parties.
6. With regulators, courts or law-enforcement bodies where legally required.
7. With other parties when the user directs or validly consents to the sharing.

Some service providers may process information outside Ghana. Xonbay should evaluate transfer requirements and use appropriate contractual, organisational and technical safeguards where required.

Xonbay retains personal data only for as long as reasonably necessary for the stated purposes, contractual obligations, fraud prevention, dispute resolution, security, tax, accounting and legal requirements.

1. Request access to personal data held about you.
2. Request correction of inaccurate or incomplete data.
3. Object to or request restriction of certain processing where applicable.
4. Withdraw consent where processing relies on consent.
5. Request deletion where the law permits.
6. Request data portability where applicable.
7. Complain to Xonbay or the relevant data-protection authority.

Xonbay uses administrative, technical and organisational measures designed to protect personal data. No service can guarantee absolute security, and users must also protect their credentials and devices.

Xonbay is not intended for children to operate businesses or enter binding commercial arrangements without appropriate adult authorisation. Final age limits and parental-consent rules should be confirmed through legal review.

Xonbay may update this Policy to reflect changes in services, technology, law or business operations. Material changes should be communicated through the service or another appropriate channel.