How Corido Marketplace Ltd collects, uses and protects your personal data. We handle it in line with Kenya’s Data Protection Act, 2019.
Account details (name, phone number, email), KYC verification data (ID, KRA PIN, selfie) held only to satisfy legal identity requirements, listing and transaction records, device and usage data, and M-Pesa payment references. We never store your M-Pesa PIN.
To run Secure Pay escrow, verify sellers, prevent fraud, provide support, and — only with your consent — send you saved-search alerts and product updates. We do not sell your data to advertisers.
Payment processors (Pesapal, Safaricom M-Pesa), identity verification (Smile Identity), and logistics partners — strictly to complete a transaction you initiated. Law-enforcement disclosure only on lawful request.
Under the Data Protection Act 2019 you may access, correct, export, or delete your data, and withdraw consent at any time. To exercise any of these, email privacy@corido.co.ke.
Transaction and KYC records are kept for 7 years as required by Kenyan financial and tax law. Other data is kept for as long as your account is open. To request erasure, email privacy@corido.co.ke. Encrypted database backups are kept for 30 days and roll off automatically.