Legal
Privacy policy
How Tatem Solutions Ltd handles your data on the Lokona platform.
The short version
We collect the minimum data needed to run a safe marketplace.
We never sell your data.
Your personal info is stored in the country of operation or in encrypted EU-hosted backups.
You can see, export, or delete your data anytime in account settings.
Contents
01Who we are
Lokona is operated by Tatem Solutions Ltd, headquartered in Rwanda, which acts as the data controller for all personal data you share with us. For data-related enquiries, contact us at info@lokona.com.
02What we collect
From all users
Name, email (if provided), district/sector, preferred language, device & browser info, IP address, on-site activity logs (what you view, what you message).
From sellers
National ID number (hashed), photos you post of items, chat messages with buyers, listing data, rating history.
From businesses
Everything above plus business registration number, tax identification number, business description, opening hours.
From buyers
Transaction confirmation records (which listings you confirmed purchasing), review history.
During a transaction (both parties)
Transaction record (listing, sale date, seller, buyer), confirmation timestamps, review submissions. Note: Lokona does not process payments. No payment card or mobile money credentials pass through our systems.
03Why we collect it
We process data for these purposes:
- Running the service: show you listings, enable messaging, manage your account and storefront.
- Trust & safety: verify identities, calculate reputation scores, detect fraud, investigate disputes.
- Legal compliance: meet company registry, tax authority, and applicable data protection law requirements in our country of operation.
- Communication: send you transactional email and notifications about your listings, messages, and account.
- Improving Lokona: understand what works, fix bugs, build new features, always with aggregated/anonymized data.
04Who we share it with
Other users (limited)
Your name, ratings, and listings are visible to other users on the platform.
Service providers
- Email delivery providers (OTP and notifications sent via email)
- Cloud hosting providers (data residency: country of operation or EU)
Authorities
Only when legally required. We notify you before disclosing your data unless the law prohibits it.
Never: we do not sell or rent your data to advertisers, data brokers, or marketing agencies.
05How we protect it
- Data encrypted in transit (TLS 1.3) and at rest.
- National ID numbers are hashed in our database, even our staff cannot see the plain value.
- Payment details never touch our servers, all buyer-seller payments are off-platform.
- Role-based access: only specific admin staff see any personal data, and every access is logged.
- Third-party security audits annually.
- Breach notification within 72 hours to affected users, in line with applicable data protection law.
06How long we keep it
07Your rights
Under applicable data protection law you have the right to:
- Access all data we hold about you (export from account settings).
- Correct inaccurate data.
- Delete your account and associated data.
- Object to specific processing (e.g. marketing).
- Withdraw consent for optional data uses.
- File a complaint with the data protection authority or relevant regulator in your country if you believe we have mishandled your data.
To exercise any of these, email info@lokona.com or use the settings page in your account.
08Cookies & tracking
We use minimal cookies: one for your session, one for your language preference, and one for rate-limiting / fraud prevention. We do not use third-party advertising trackers. We use a privacy-respecting analytics service that does not identify individual users.
09Children
Lokona is for users 18 and older. We do not knowingly collect data from under-18s. If you believe a minor has created an account, contact us and we will remove it.
10Changes to this policy
If we materially change how we handle your data, we'll notify all users by site banner and email at least 14 days before the change takes effect. You can always see the last-updated date at the top of this policy.
11Contact
Last updated: 17 June 2026 · Version 1.1
© 2026 Tatem Solutions Ltd. All rights reserved.