Privacy policy

Data controller

The controller of your data is:

• KossKoss Select
• Rue Njo-Njo, Bonapriso
• Douala
• Cameroon
• Email: contact@kosskoss.cm
• Phone / WhatsApp: +237 658 01 36 46

Data processed when you order

To process an order we collect the following data:

• First name and surname
• Delivery address
• Email address
• Phone number, needed to arrange delivery (in particular by WhatsApp)
• Order contents, amounts and chosen payment method
• Answers to the beauty diagnostic, when you choose to use it

Purposes

Your data is used solely for the following purposes:

• Fulfilling the order, delivery and after-sales service
• Meeting our accounting and tax obligations
• Product recommendations from the beauty diagnostic, with your agreement
• Sending marketing communications where you have consented, revocable at any time

Customer account

Creating an account is optional: ordering as a guest remains possible. The password is stored as a non-reversible hash and is never readable, including by our own team.

Recipients

Your data is disclosed only to recipients necessary for performing the contract:

• The delivery agent or carrier, for transport of the parcel
• The payment provider, for collection (Mobile Money, card)
• Technical providers (hosting, email delivery), acting as processors

Retention periods

We keep your data only as long as necessary:

• Order data and invoices: for the applicable accounting and tax retention periods
• Customer account: until you delete it, then erased within a reasonable time
• Marketing recipients: until you withdraw your consent

Cookies and trackers

The site uses only cookies strictly necessary for it to work: sign-in session, cart and language preference. No third-party analytics, advertising or social media cookie is set without your prior consent.

Your rights

Under the conditions laid down by the applicable regulations, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure
• Right to object, in particular to marketing
• Right to withdraw your consent at any time

Exercising your rights

Send your request to contact@kosskoss.cm. From your customer account you can also export your data and delete your account without going through us.

Limits to erasure

Deleting an account does not delete orders already fulfilled: invoices and accounting records are subject to the statutory retention periods. Orders are then detached from the account and any contact details not required on the invoice are removed from them.

Security

Traffic with the site is encrypted (TLS). Access to data is limited to those who need it, back-office authentication requires a second factor, and technical secrets are protected at rest.