Privacy policy

This policy explains what personal information Koya Marketing collects when you use koyamarketing.org or hire us, why we collect it, and what control you have over it. We have tried to write it in plain language rather than legal padding.

Who we are

Koya Marketing (also trading as Koya Marketing Agency) is a GoHighLevel implementation agency operating from Lagos, Nigeria. For the purposes of the UK and EU General Data Protection Regulation, Koya Marketing is the data controller for information collected through this website.

Contact: [email protected] or +1 650 501 5810. Postal address: Lagos, Nigeria.

What we collect

Information you give us

• Name, email address, phone number and company name when you submit a form or book a consultation.
• What you tell us about your business, your current setup and what you need built.
• Billing information when you engage us directly. Payments made through Fiverr are handled by Fiverr, and we never see your card details.

Information collected automatically

• IP address, browser type, device type, referring page and the pages you visit on this site.
• Cookie identifiers used to keep the site working and to understand which pages people read.

Client account access

When you hire us we usually need access to your GoHighLevel sub-account, and sometimes to connected services such as Twilio, Mailgun, Stripe, Google or Meta. That access may expose your customers' personal data to us. We treat that data as yours, not ours. We use it only to build and test what you have asked for, we do not copy it out of your systems, and we ask you to revoke our access once the project is handed over.

Why we use it

• To reply to you. Answering enquiries, sending proposals, scheduling calls.
• To deliver work. Building, testing and supporting what you hired us for.
• To run the business. Invoicing, record keeping, resolving disputes.
• To improve the site. Understanding which pages are useful.
• To send updates, but only if you asked for them. Every marketing email has an unsubscribe link that works.

Our legal bases under GDPR are your consent for marketing, the performance of a contract for client work, and our legitimate interest in running and improving the business for everything else.

Who we share it with

We do not sell personal information and we do not share it for anyone else's advertising. We do use service providers who process data on our behalf:

• GoHighLevel (HighLevel Inc.) for our CRM, forms and calendar.
• Fiverr where a project is contracted and paid through the platform.
• Google for email and file storage.
• Twilio and Mailgun where SMS or email is sent on our behalf.

We may also disclose information where the law requires it, or to protect our legal rights.

International transfers

We operate from Nigeria and our providers are largely based in the United States. If you are in the UK or EU, this means your information is transferred outside your jurisdiction. Where required we rely on standard contractual clauses or the equivalent safeguards our providers have in place.

How long we keep it

• Enquiries that do not become projects: 24 months, then deleted.
• Client records: 7 years after the last project, for tax and legal reasons.
• Marketing contacts: until you unsubscribe.
• Access to your platforms: revoked at handover.

Your rights

Wherever you are, you can ask us to show you what we hold, correct it, delete it, or stop using it for marketing. Email [email protected] and we will respond within 30 days.

If you are in the UK or EU you also have the right to data portability, the right to object to processing, and the right to complain to your supervisory authority. In the UK that is the Information Commissioner's Office.

If you are a California resident you have the right to know what we collect, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

Cookies

This site uses cookies that are necessary for it to function, and analytics cookies that tell us which pages people read. You can block cookies in your browser settings, though some parts of the site may stop working properly if you block the necessary ones.

Security

We use encrypted connections, two-factor authentication on the accounts that hold client data, and access limited to the team members who need it. No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data we will tell you without undue delay.

Children

This site is for businesses. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it.

Changes

If we change this policy we will update the date at the top. Material changes will be emailed to active clients.

Contact

Questions about this policy go to [email protected] or +1 650 501 5810.