Privacy policy
KYA MALL GLOBAL
How we collect, use and protect personal data in the KYA Mall Global marketplace, member portal and partner programmes.
This policy explains how personal data is handled when you use the KYA Mall Global marketplace, create a membership account, place or sell orders, or take part in member programmes. It applies to customers, sellers, members and visitors.
Personal data we collect
We collect information you provide when you register, sign in, order, sell, contact support or join a programme — including your name, email address, phone number, delivery and billing address, order and payment-status details, shop information and any message you send us. We also collect technical and usage data such as device and browser details and the pages you visit, and the account and transaction records generated by your activity on the platform.
How we use personal data
Personal data is used to create and secure your account, process and deliver orders, collect and reconcile payments, handle support, returns and refunds, publish seller listings and shop information, calculate programme rewards, prevent fraud and misuse, and operate, maintain and improve the platform.
Payments
Order payments are processed by our payment provider on the checkout page. Full card or banking credentials are handled by that provider; we receive payment status and reference details needed to confirm and reconcile your order. We do not store complete card numbers on the platform.
Sharing with sellers, couriers and service providers
To fulfil an order we share the delivery details needed by the seller or fulfilment team, and by the courier or delivery partner. We also use service providers for hosting, email delivery, payment processing, file storage and similar operations, and share data with them only as needed for those services or where the law requires it.
Cookies and similar technologies
The platform uses cookies and local browser storage to keep you signed in, remember your cart, wishlist and language preference, and understand how the marketplace is used. You can clear or block these through your browser settings, but some features may stop working correctly.
Retention
Account, order, payment and reward records are kept for as long as your account is active and afterwards for the period needed to meet accounting, tax, dispute and legal obligations, after which they are deleted or anonymised.
Your rights
Under the Personal Data Protection Act 2010 you may request access to the personal data we hold about you, ask for corrections, limit certain processing or object to it, withdraw consent where consent is the basis for processing, and ask us to stop using your data for marketing. Some requests may be limited by legal or contractual record-keeping duties.
Security
Access to personal data is restricted to personnel and providers who need it for their work. Data is transmitted over encrypted connections, and account access is protected by credentials and session controls. No system is completely secure, so please keep your password private and tell us promptly if you suspect unauthorised access to your account.
Children
The marketplace is intended for users aged 18 and above. Accounts for minors must be created and managed by a parent or legal guardian who accepts responsibility for the account and its transactions.
Changes to this policy
This policy may be updated to reflect changes in the platform, our practices or the law. The current version is always published on this page, and material changes will be highlighted on the platform.
Contact and data requests
To make a data access, correction or other privacy request, use the Contact us form and select “Other”, stating that your message is a personal data request and the account email involved. We may ask for information to verify your identity before acting on a request.