PRIVACY POLICY - COBEST

Last updated: October 6, 2025

1. GENERAL INFORMATION

Cobest ("we", "our" or "company") operates the Cobest mobile application (the "Service").

This page informs you of our policies regarding the collection, use and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. DATA COLLECTED

2.1 Personal Information Provided Directly

Registration and Profile Data:

• Full name (first name and last name)
• Email address
• Phone number
• Password (stored in encrypted form)
• Profile picture (optional)
• Date of birth (if applicable)

Address Data:

• Complete delivery address
• City
• Postal/ZIP code
• Country
• Geolocation coordinates (for delivery)
• Address type (home, work, others)

Payment Data:

• Credit/debit card information (processed by secure third parties)
• Transaction history
• Preferred payment methods
• Digital wallet data

2.2 Automatically Collected Data

Device Data:

• Device model
• Operating system
• App version
• Device language
• Push notification token (Firebase)
• Unique device identifier

Location Data:

• GPS location (with your permission)
• IP address
• Network information

Usage Data:

• App browsing history
• Products viewed
• Searches performed
• Time spent in the app
• Notification interactions

2.3 Communication Data

• Messages sent through the app chat
• Customer service conversations
• Product reviews and comments
• Technical support tickets

3. PURPOSES OF PROCESSING

3.1 Service Provision

• User account creation and management
• Order and payment processing
• Product delivery
• Customer service
• Order-related communication

3.2 Service Improvements

• User experience personalization
• Product recommendations
• App performance analysis
• New feature development

3.3 Marketing and Communication

• Sending offers and promotions
• New product notifications
• Service update communications
• Loyalty programs

3.4 Security and Compliance

• Fraud prevention
• Identity verification
• Legal obligation compliance
• Dispute resolution

4. LEGAL BASIS FOR PROCESSING

The processing of your personal data is based on:

• Consent: For direct marketing and promotional communications
• Contract performance: For providing the requested services
• Legitimate interest: For service improvements and security
• Legal obligation: For compliance with tax and regulatory requirements

5. DATA SHARING

5.1 Authorized Third Parties

Payment Processors:

• Payment data shared with secure payment gateway providers
• Only information necessary to process transactions

Delivery Service Providers:

• Name, phone and delivery address
• Only to logistics partner companies

Technology Providers:

• Firebase (Google) for push notifications and analytics
• Google Maps for location services
• Hosting and infrastructure providers

5.2 No Sharing

• We never sell your personal data
• We do not share data for third-party advertising purposes without consent
• Access restricted only to authorized employees

6. DATA RETENTION

Account Data:

• Maintained while the account is active
• 2 years after account inactivity

Transaction Data:

• 5 years for tax and accounting purposes
• Compliance with commercial legislation

Marketing Data:

• Until you withdraw consent
• Maximum of 3 years without interaction

7. YOUR RIGHTS

7.1 Access and Control Rights

• Access: Request a copy of your personal data
• Rectification: Correct incorrect or incomplete data
• Deletion: Request removal of your data
• Portability: Receive your data in structured format
• Objection: Object to processing for direct marketing

7.2 How to Exercise Your Rights

• Through email: info@cobest.co.mz
• Within the app itself (privacy settings)
• Response timeframe: up to 30 days

8. DATA SECURITY

8.1 Technical Measures

• Data encryption in transit and at rest
• Two-factor authentication
• 24/7 security monitoring
• Regular secure backups

8.2 Organizational Measures

• Employee privacy training
• Internal security policies
• Role-based access control
• Regular security audits

9. COOKIES AND SIMILAR TECHNOLOGIES

9.1 Types of Cookies

• Essential Cookies: Necessary for basic functionality
• Performance Cookies: For app usage analysis
• Functionality Cookies: For experience personalization

9.2 Management

• You can manage preferences in the app settings
• Some cookies are essential and cannot be disabled

10. INTERNATIONAL TRANSFERS

• Data may be transferred to countries with adequate level of protection
• We implement adequate safeguards for transfers
• Compliance with international privacy standards

11. MINORS

• Our service is not intended for minors under 18 years old
• We do not intentionally collect data from minors
• If we identify minor data, it will be removed immediately
• Parents/guardians can contact us for data removal

12. POLICY UPDATES

• This policy may be updated periodically
• Users will be notified of significant changes
• Current version always available in the app
• Continued use implies acceptance of changes

13. APPLICABLE LAW

This policy is governed by the laws of Mozambique and applicable international data protection regulations.

14. DPO COMMUNICATION CHANNEL

15. CONFLICT RESOLUTION

In case of disputes related to personal data processing:

1. Direct Contact: Contact us first
2. Data Protection Authorities: Right to file a complaint
3. Mediation: Available for amicable conflict resolution

16. TRANSPARENCY STATEMENT