1Data controller
The data controller is Wisebled Tec Ltd, with its registered office at Istanbul, Türkiye. For any questions regarding the protection of your data, you may contact us at privacy@wisebled.com or at the postal address above.
Wisebled Market operates a cross-border marketplace between Africa and Turkey. Depending on the nature of processing and users' locations, certain subprocessors or partner entities may act as joint controllers or processors, in compliance with contractual agreements and applicable regulations (including the GDPR for European users, Cameroonian Law No. 2010/012, and the Turkish KVKK).
A Data Protection Officer (DPO) can be reached at privacy@wisebled.com for any request relating to your rights or privacy choices.
2Data collected
We collect data you provide directly when creating an account, placing orders, selling, contacting support, or completing identity verification (KYC): name, email address, phone number, shipping and billing addresses, identity documents, bank or Mobile Money details, order history, and messages exchanged via the platform.
Data is also collected automatically during your browsing: IP address, session identifiers, device type, operating system, pages viewed, products seen, clicks, language and currency preferences, approximate geolocation (country, city), and technical logs required for security and proper service operation.
When you sign in via Google or other OAuth providers, we receive information authorized by your third-party account (name, email, profile photo). We do not collect sensitive data (racial origin, political opinions, health) unless you voluntarily provide it in a support message and strictly to the extent necessary to handle your request.
- Account and profile data
- Transaction data (orders, payments, refunds, wallet)
- Logistics data (cargo tracking, customs, proof of delivery)
- Communication data (support, disputes, reviews)
- Technical and browsing data (cookies, analytics)
3Purposes of processing
Your data is processed to create and manage your account, fulfill orders, facilitate payments (bank card, Mobile Money, Wisebled wallet), organize international shipments through our cargo partners, track deliveries, and provide after-sales service.
We also use your data to prevent fraud, counterfeiting, and money laundering, verify seller identity (KYC), comply with legal obligations (invoicing, accounting, responses to authorities), personalize your experience (recommendations, localized content), and send transactional or marketing communications according to your preferences.
Aggregated and anonymized data may be used for statistical purposes, service improvement, and audience measurement, without directly identifying you.
4Legal bases
Processing of your data is primarily based on contract performance (account creation, orders, sales, delivery), your consent (non-essential cookies, marketing newsletters, precise geolocation), or our legitimate interests (security, fraud prevention, service improvement, limited analytics).
Certain processing is required by law: retention of accounting records, response to judicial requests, compliance with anti-money laundering regulations and international sanctions applicable to cross-border transactions.
You may withdraw your consent at any time for processing that depends on it, without affecting the lawfulness of processing carried out before withdrawal. For processing based on legitimate interest, you have a right to object, which we will assess on a case-by-case basis.
5Sharing and recipients
We share your data only with trusted third parties and to the extent necessary: sellers and buyers involved in a transaction, payment providers (Stripe, Mobile Money, partner banks), carriers and cargo agents, cloud and hosting providers, analytics tools (Google Analytics, subject to consent), identity verification services, and competent authorities when required by law.
Our subprocessors are contractually bound to process your data in accordance with our instructions, ensure an appropriate level of security, and not use it for other purposes. We do not sell your personal data to third parties for advertising purposes.
In the event of a merger, acquisition, or asset transfer, your data may be transferred to the new operator, subject to informing you and maintaining an equivalent level of protection.
6International transfers
Wisebled Market operates between Africa (notably Cameroon and other host countries) and Turkey. Your data may be transferred, stored, or processed in these jurisdictions as well as in countries where our technical providers are established (European Union, United States for certain cloud services).
When data is transferred to a country without an adequacy decision, we implement appropriate safeguards: European Commission standard contractual clauses, binding corporate rules, or explicit consent when required. For Turkish users, transfers comply with KVKK requirements and decisions of the Personal Data Protection Authority.
Transfers related to cargo operations and cross-border payments are limited to strictly necessary data (recipient identity, address, declared contents for customs) and transmitted via secure channels to relevant carriers and customs authorities.
7Retention period
We retain your data for as long as necessary for the purposes for which it was collected: account lifetime plus three (3) years for disputes and claims; ten (10) years for accounting and tax data; legal duration for seller KYC data.
Browsing data and security logs are retained between six (6) and twenty-four (24) months depending on their nature. Cookies are retained according to their lifespan as indicated in our Cookie Policy.
Upon expiry of retention periods or upon deletion request (subject to legal retention obligations), your data is deleted or irreversibly anonymized.
8Security
We implement appropriate technical and organizational measures: TLS encryption in transit, encryption at rest for sensitive data, role-based access control, strong authentication for seller accounts, regular security audits, and incident response procedures.
Card payment data is processed by PCI-DSS certified providers; Wisebled does not store full card numbers. Mobile Money and wallet operations are subject to limits, identity verification, and anti-fraud monitoring.
Despite our efforts, no transmission over the Internet is completely secure. In the event of a data breach likely to pose a risk to your rights, we will inform you and notify competent authorities within legal timeframes.
9Your rights
Under applicable regulations, you have the rights of access, rectification, erasure, restriction, portability, and objection to processing of your data, as well as the right to withdraw consent and lodge a complaint with the competent data protection authority (CNIL, APDP Cameroon, KVKK Türkiye, depending on your residence).
To exercise your rights, log in to your account (Settings > Privacy) or contact us at privacy@wisebled.com. We will respond within one (1) month, extendable by two (2) months for complex requests. Proof of identity may be requested to verify your identity.
You can also manage your marketing communication and cookie preferences directly from the platform. Non-essential cookies can be managed via our consent banner without creating an account.
10Protection of minors
Wisebled Market is intended for persons aged 18 and over. We do not knowingly collect personal data from minors under 18 without verifiable consent from a parent or legal guardian.
If we learn that a minor has created an account or submitted data without parental authorization, we will delete the account and associated data as soon as possible. Parents or guardians may contact us at privacy@wisebled.com to request access, rectification, or deletion of their child's data.
See our Child Safety page (/legal/protection-mineurs) for more information on our child protection measures on the platform.
12Contact and DPO
For any questions regarding this policy or your personal data: privacy@wisebled.com. DPO: privacy@wisebled.com. Postal address: Wisebled Tec Ltd, Istanbul, Türkiye.
We reserve the right to modify this policy. Any material change will be notified by email, platform notification, or information banner. The last update date appears at the top of this document.