Chiboor Privacy Policy

Effective Date: 1 August 2026  |  Contact: privacy@chiboor.com

When you use Chiboor, you are trusting us with your information. We take that responsibility seriously. This Privacy Policy explains what information we collect, why we collect it, and how you can manage it.

Contents

Information we collect

We collect information to operate the Chiboor supplier directory and to provide useful services to both suppliers and buyers. The information we collect, and how it is used, depends on how you use the platform.

Information you provide (suppliers only)

When you register as a supplier on Chiboor, you provide us with:

  • Business or personal name and trading name
  • Official email address (used as your login username)
  • Contact phone number(s)
  • Business address (country, province/state, city, street)
  • Business hours and closed day preferences
  • Online presence links (website, social media) if you choose to provide them
  • Product and service listings you submit
  • Account password (stored in encrypted form — never in plain text)
  • Business registration certificate, if you apply for a verification badge (Gold and Platinum plans only)

Information we collect automatically (all users)

When any visitor accesses chiboor.com, our systems automatically collect:

  • General location (country or city level, derived from IP address)
  • Date and time of access
  • Products or services searched
  • Device type (mobile or desktop)
  • Browser type and operating system
  • IP address

Payment information

Chiboor does not collect, store, or process payment card data. All payments are handled by our third-party processors — Stripe and PayPal. We receive only a payment confirmation status. No card numbers, bank details, or payment credentials are stored on Chiboor's systems. When you make a payment, you are also subject to the privacy policy of the respective payment processor.

Why we collect data

We use the information we collect for the following purposes:

To provide the platform

  • Create and manage your supplier account
  • Display your business and products in the Chiboor directory
  • Enable buyers to find and contact you
  • Enforce subscription limits and product listing rules

To communicate with you

  • Send account-related notifications (product changes, subscription updates)
  • Send subscription expiry reminders and renewal confirmations
  • Deliver your monthly dashboard summary email
  • Send re-engagement emails if your subscription lapses — a maximum of 3 months, then stopped automatically

Mandatory emails (billing, expiry notices, account security) cannot be opted out of. Non-critical communications include an unsubscribe option.

To improve the platform

  • Analyse search patterns to understand what buyers are looking for
  • Provide suppliers with market intelligence (for example, top platform-wide searches)
  • Monitor platform performance and fix issues
  • Improve search relevance and category structure

To protect the platform and its users

  • Detect and prevent fraud, abuse, or unauthorised access
  • Enforce our Terms of Service
  • Comply with legal obligations

Buyer data and anonymity

Buyers access Chiboor without creating an account. We do not require buyers to provide any personal information to search the directory or view supplier profiles.

The data collected from buyer sessions — search terms, location, device type, and timestamps — is aggregated and anonymised. It is used to:

  • Show suppliers which products are being searched on the platform
  • Generate the 24-hour buyer activity chart in the supplier analytics dashboard
  • Identify top platform-wide search trends

This data is not linked to any individual buyer identity and is not shared with third parties.

Sharing your information

We do not sell your personal information. We share information only in the following limited circumstances:

Publicly on the platform

Supplier information you choose to make public — such as your business name, contact numbers, business hours, products, and online presence links — is visible to all buyers searching the directory. You control which contact details are displayed through your profile settings.

Service providers

We use trusted third-party providers to operate Chiboor's infrastructure:

  • Supabase – database and authentication hosting
  • Vercel – web hosting and content delivery
  • Stripe – payment processing
  • PayPal – payment processing

These providers access your information only to perform services on our behalf. They are bound by confidentiality obligations and do not use your data for their own purposes.

Legal requirements

We may disclose your information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our Terms of Service.

Business transfers

If Chiboor is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Keeping your information secure

We take reasonable technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These include:

  • Encrypted storage of account passwords (never stored in plain text)
  • Secure HTTPS connections for all data transmission
  • Access controls limiting who can access account data
  • Audit logs for subscription changes, product updates, and email delivery

No method of transmission over the internet is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security.

Retaining your information

We retain your information for as long as your account is active or as needed to provide services. Specifically:

  • Supplier account data is retained for the duration of the account and for a reasonable period after closure for legal and audit purposes
  • Product listings and business profile data are retained while the account is active
  • Automated email logs are retained for audit and compliance purposes
  • Anonymised buyer search data may be retained indefinitely as it contains no personal identifiers
  • Payment transaction records are retained as required by applicable financial regulations

You may request deletion of your account and personal data at any time by contacting privacy@chiboor.com. We will process such requests within a reasonable timeframe, except where retention is required by law.

Your rights

Depending on applicable law, you may have the following rights regarding your personal information:

  • Access – Request a copy of the personal information we hold about you.
  • Correction – Request correction of inaccurate or incomplete information.
  • Deletion – Request deletion of your personal data, subject to any legal obligations we have to retain it.
  • Objection – Object to certain uses of your information, such as marketing communications.
  • Portability – Request a copy of your data in a portable format where technically feasible.

To exercise any of these rights, contact us at privacy@chiboor.com. We will respond within 30 days.

Cookies

Chiboor uses essential cookies and session storage to keep the platform functioning correctly — for example, to keep you logged in as a supplier and to remember your session preferences. We do not use advertising cookies or third-party tracking scripts.

You can configure your browser to block cookies, but doing so may affect your ability to use certain features of the platform, such as remaining logged in.

International data transfers

Chiboor uses cloud infrastructure providers (Supabase and Vercel) whose servers may be located outside Malawi, including in the United States or European Union. By using Chiboor, you consent to your data being transferred to and processed in these locations.

Regardless of where your data is stored, we apply the same protections described in this Privacy Policy. We will update this section when our server region is confirmed.

Children's privacy

Chiboor is a business-to-consumer (B2C) platform intended for use by adults aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact privacy@chiboor.com and we will take steps to remove that information.

Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

  • Update the effective date at the top of this page
  • Notify registered suppliers by email at least 14 days before the change takes effect

Your continued use of Chiboor after any changes constitutes your acceptance of the updated policy.

Contact us

If you have any questions or requests regarding this Privacy Policy, please contact us:

We aim to respond to all privacy-related enquiries within 30 days of receipt.

This Privacy Policy is effective as of 1 August 2026. All previous versions are superseded.