Privacy Policy

Last updated: May 21, 2026

foshika ("we", "us", or "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use our website and services (the "Platform"), how we use it, with whom we share it, and what rights you have. By using the Platform, you acknowledge this Policy. Where required by law, we will ask for your consent for specific processing activities.

1. Who is responsible for your data?

For the purposes of applicable data protection laws, foshika acts as the data controller for personal data processed in connection with your use of the Platform, except where a Seller processes data as an independent controller for order fulfilment or customer service relating to their products.

Contact details for privacy-related requests are provided in Section 13 below.

2. Personal data we collect

Depending on how you use the Platform, we may collect the following categories of data:

  • Identity and account data: name, username, email address, phone number, password (stored in hashed form), and country.
  • Order and transaction data: delivery address, billing details, order history, payment status, and communications about orders.
  • Technical and usage data: IP address, device type, browser, pages viewed, referral source, and approximate location derived from IP.
  • Communications: messages you send to customer support, reviews, or feedback.
  • Marketing preferences: your choices regarding newsletters or promotional communications, where permitted by law.

3. How we use your data

We use personal data to operate the Platform and provide our services, including:

  • Creating and managing your account and authenticating sign-in.
  • Processing orders, payments, deliveries, returns, and refunds.
  • Connecting you with Sellers and facilitating marketplace transactions.
  • Providing customer support and responding to your requests.
  • Improving the Platform, performing analytics, and preventing fraud or abuse.
  • Sending service-related notices (for example, order confirmations or security alerts).
  • Sending marketing communications where you have opted in or where otherwise permitted by law.

4. Legal bases for processing (EEA/UK users)

If you are located in the European Economic Area or the United Kingdom, we process personal data on the following legal bases, as applicable:

  • Performance of a contract: to provide the Platform and fulfil orders you place.
  • Legitimate interests: to secure the Platform, improve our services, and prevent fraud, balanced against your rights.
  • Consent: for optional cookies, certain marketing, or other processing where consent is required.
  • Legal obligation: to comply with tax, accounting, consumer, or other applicable laws.

5. Who we share data with

We do not sell your personal data. We may share data with:

  • Sellers: to fulfil orders and provide product-related support.
  • Payment providers: to process payments securely.
  • Delivery and logistics partners: to ship orders where applicable.
  • IT and hosting providers: to run and maintain the Platform.
  • Professional advisers and authorities: when required by law or to protect our legal rights.
  • Successors: in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

6. Cookies and similar technologies

We use cookies and similar technologies to remember your preferences, keep you signed in, measure traffic, and improve the Platform. Some cookies are essential; others require your consent where mandated by law.

You can manage cookie preferences through your browser settings or any cookie banner we provide. Disabling certain cookies may affect Platform functionality.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes described in this Policy, including to comply with legal, tax, and accounting obligations.

Account data is generally kept while your account is active and for a reasonable period thereafter. Order records may be retained longer where required by law or for dispute resolution.

8. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data, subject to legal exceptions.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Receive a portable copy of data you provided.
  • Lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before responding.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure; we encourage you to use a strong password and protect your account credentials.

10. International transfers

Your data may be processed in countries other than your own. Where we transfer personal data outside the EEA/UK, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms required by applicable law.

11. Children

The Platform is not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when changes took effect. Material changes will be communicated through the Platform or by other appropriate means.

13. Contact us

For privacy questions, requests, or complaints, please contact us through the support section of the Platform or at the contact details published on our website.

If you are in the EEA/UK and are not satisfied with our response, you may also contact your local data protection authority.