Privacy Policy

This policy explains how Coblot ("we", "us") handles personal data when you visit coblot.com or use our virtual numbers, travel eSIMs, or digital marketplace (the "Service"). We handle personal data in line with the Nigeria Data Protection Act 2023.

1. Data we collect

You give us:

• Account details: your name, email address, and password. We store passwords only in hashed form.
• Phone number: when our payment provider needs one to process a payment.
• Payment records: deposit amounts, payment references and status, and any receipt you upload for a bank transfer. We do not store your full card details.
• Vendor applications: if you apply to sell, your display name, what you plan to sell, your links, and your payout details.
• Messages: what you send us when you contact support or open a dispute.
• Newsletter: your email address, if you subscribe.

We collect as you use the Service:

• Orders and activity: numbers, eSIMs and products you buy, your wallet balance and transactions, your favourites, and API keys you create.
• Codes delivered to your numbers: the messages received on a virtual number, so we can show them in your dashboard.
• Technical data: your IP address, browser type, and session details, which keep you logged in and help us detect abuse.

2. How we use your data, and our legal basis

• To provide the Service (performing our contract with you): to run your account and wallet, fulfil orders, deliver codes and eSIMs, process refunds, and provide support.
• To keep the Service safe (our legitimate interests): to prevent fraud and abuse, secure accounts, and enforce our Anti-Fraud Policy.
• To meet legal duties (legal obligation): to keep financial records and respond to lawful requests.
• To send updates and measure advertising (your consent, or our legitimate interests where the law allows): newsletters, and understanding which adverts bring people to Coblot. You can unsubscribe at any time.

3. Who receives your data

We do not sell your personal data. We share only what each of these needs to do its job:

• Payment providers, to process deposits and confirm payments.
• Virtual number and eSIM suppliers, to fulfil what you order.
• Marketplace vendors, the order details needed to deliver your purchase and handle disputes.
• Hosting and email providers, who store our data and send our emails.
• Advertising platforms, as described in section 4.
• Authorities, where the law requires it or to protect people from fraud or harm.

4. Cookies and advertising

We use essential cookies to keep you logged in and protect forms. Your light or dark theme choice is saved in your browser.

When we run adverts, we may use TikTok and Snapchat tools to measure them. These can collect your IP address, browser details, and the pages you visit. When you sign up, we may also send TikTok a scrambled (hashed) version of your email address and account ID, along with your IP address and browser details. You can limit this through your browser or device settings and through each platform's advertising settings.

5. International transfers

Some of our suppliers are outside Nigeria, so your data may be processed in other countries. Where this happens, we rely on the safeguards the Nigeria Data Protection Act allows.

6. How long we keep data

We keep your data while your account is open and for as long as we need it for the purposes above. If you delete your account, we remove your name, email, and login access. We keep the related order and transaction records because we need them for accounting, legal duties, and fraud prevention, but they are no longer linked to your name or email.

7. How we protect your data

We hash passwords and API keys, encrypt sensitive data such as marketplace credentials and two-factor secrets, use HTTPS, and limit admin access. You can turn on two-factor login in your account. No system is perfectly secure, so please use a strong, unique password.

8. Your rights

You can ask us to:

• give you a copy of your personal data, including in a portable format;
• correct data that is wrong;
• delete your data, subject to the records we must keep;
• restrict or stop certain uses, including direct marketing;
• withdraw consent where we rely on it.

You can also request account deletion from your account settings. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission.

9. Age limit

The Service is for people aged 18 or over. We do not knowingly collect data from anyone younger.

10. Changes to this policy

We may update this policy. The "last updated" date above shows the current version, and we will tell you about significant changes through the Service or by email.

11. Contact

For privacy questions or requests, email coblot24@gmail.com.