Effective date: 23 August 2026
ALIKOTO ("ALIKOTO", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use our website www.alikoto.com and related services (the "Platform"), why we collect it, who we share it with, and the rights you have. It should be read together with our Terms and Conditions and Cookie Policy.
ALIKOTO is an e-commerce marketplace for sports, fitness, and lifestyle fashion, operated from Accra in the Republic of Ghana. For the purposes of Ghana's Data Protection Act, 2012 (Act 843), ALIKOTO is the data controller for personal data processed through the Platform.
Data protection questions, requests, or complaints: alikoto@alikoto.com.
When you register or shop, we collect your name, email address (verified at sign-up), password (stored only as a cryptographic hash), phone number(s), profile photo (if you upload one), gender and date of birth (optional), saved delivery/billing addresses, and communication preferences. You may also sign up using Google, Facebook, or Apple, in which case we receive your name, email address, and a unique account identifier from that provider.
We support passwordless login by one-time codes sent by SMS, and optional two-factor authentication. For account security we keep records of your devices and sessions, including device type, browser, operating system, IP address, approximate location derived from it, and login timestamps.
For each order we process the products purchased, order value, delivery and billing details (including any GhanaPost GPS digital address, landmark description, and map-pin coordinates you provide), your chosen pickup station if applicable, delivery-tracking history, and courier proof-of-delivery photos where used.
All payments are collected electronically through our payment service provider, currently Paystack (cards and mobile money). Card numbers, CVV codes, and mobile-money PINs are entered directly into Paystack's secure checkout and never reach ALIKOTO's servers. If you choose to save a payment method for faster checkout, we store only Paystack-issued tokens together with limited display details such as the card brand, last four digits, expiry date, or the mobile-money network and number. Refund requests may include your stated reason and photographs.
If you subscribe, we store your email address or phone number for newsletters, back-in-stock alerts, price-drop alerts, and reminders about items left in your cart. Where you contact support — by ticket, live chat, our AI assistant, or the contact form — we keep the conversation, including any attachments, so we can help you and improve service quality.
Product reviews, ratings, photos, questions and answers, and reports about listings ("Report this product"), together with your public display identity alongside them.
If you apply to sell on ALIKOTO, we collect identity and business-verification information, which may include your national identification details, date of birth, tax identification number, business registration number, address, GPS address, bank or mobile-money payout details, and verification documents. This is required for onboarding, payouts, and legal compliance.
With your consent (see Section 5), we and our analytics providers collect usage data such as pages viewed, products searched and clicked, items added to carts or wishlists, recently viewed products, referral codes used, loyalty and store-credit activity, session identifiers, and error-diagnostic data. We also maintain internal security logs (for example administrative actions and fraud-prevention signals such as IP address and browser details).
| Purpose | Legal basis |
|---|---|
| Creating and managing your account; signing you in securely | Performance of a contract |
| Processing orders, payments, delivery, pickup, returns, and refunds | Performance of a contract |
| Fraud prevention, dispute handling, chargeback defence, platform security | Legitimate interests; compliance with law |
| Vendor onboarding, identity/business verification, and payouts | Compliance with law; performance of a contract |
| Customer support, live chat, and AI-assisted assistance | Performance of a contract; legitimate interests |
| Order updates and essential service messages (by email, SMS, or push) | Performance of a contract |
| Newsletters, offers, back-in-stock and price alerts, abandoned-cart reminders | Your consent (withdrawable at any time) |
| Analytics, session diagnostics, and improving the Platform | Consent for cookies; legitimate interests |
| Accounting, tax, and regulatory record-keeping | Legal obligation |
We do not sell your personal data, and we do not use your personal data for automated decisions that have legal or similarly significant effects on you.
We use cookies and comparable technologies for essential site functions and, subject to your consent, for analytics. Our consent banner lets you accept or decline non-essential categories at any time, and your choice is stored on your device. Analytics tools currently include Google Analytics 4 and Microsoft Clarity (session replays and heatmaps on desktop browsers only); error monitoring uses Sentry, which may capture session replays when errors occur. Full details are in our Cookie Policy.
These providers process data on our instructions under contract. Some are located outside Ghana; where data is transferred internationally, we rely on contractual safeguards and transfer only what is necessary.
We apply administrative, technical, and physical safeguards appropriate to the risk, including: encryption of traffic (TLS); passwords, one-time codes, and refresh tokens stored only in hashed form; hardened session cookies; least-privilege access for staff; rate limiting; and continuous monitoring. Payment card data is handled entirely by Paystack under the Payment Card Industry Data Security Standard (PCI DSS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if a breach affecting your data occurs, we will notify you and the Data Protection Commission as required by law.
Subject to the Data Protection Act, 2012 (Act 843), you have the right to:
You can exercise most choices yourself: edit profile details in My Account, manage addresses, turn off two-factor authentication, unsubscribe from emails via the link in any message, disable push notifications in your browser, and delete your account from account settings. For anything else, email alikoto@alikoto.com; we respond within thirty (30) days. We may ask for verification before acting on a request.
The Platform is not directed at children under eighteen (18), and we do not knowingly collect their personal data. Consistent with our Terms and Conditions, accounts require users to be at least 18 or to have a parent or guardian's supervision and consent. If you believe a minor has provided us personal data, contact us and we will delete it.
Transactional messages (order confirmations, delivery updates, security alerts) are part of providing the service. Promotional messages are sent only with your consent: every marketing email includes an unsubscribe link, promotional SMS includes opt-out instructions where applicable, and you can adjust newsletter preferences in My Account at any time.
We may update this Privacy Policy as our services, providers, or legal obligations change. The current version always appears on this page with a revised effective date, and we will take reasonable steps to flag material changes. Continued use of the Platform after changes take effect means you accept the updated policy.
Email: alikoto@alikoto.com
ALIKOTO Customer Support
Accra, Greater Accra Region, Republic of Ghana
Supervisory authority: the Data Protection Commission of Ghana (www.dataprotection.org.gh).