Privacy Policy

Last updated: October 2026

1. Yocota Entities and Privacy Roles

This Policy explains how Yocota collects, uses, shares and protects personal information. YOCOTA (PTY) LTD is the responsible party for personal information processed in connection with South African operations, and Yocota LLC is responsible for information processed in connection with the technology and global Platform services. Depending on the context, an entity may act as responsible party, controller, operator or processor.

In terms of POPIA, the Information Officer is Dalton Tirano Bernardo, director of YOCOTA (PTY) LTD, who can be contacted at suporte@yocota.com.

Technology and platform:: Yocota LLC, domestic limited liability company (New Mexico registration no. 0008092470), 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States
South African operations:: YOCOTA (PTY) LTD (registration no. 2026/831703/07), 11 Gwezi Street, Dunoon, Milnerton, Cape Town, Western Cape, 7441, South Africa
E-mail:: suporte@yocota.com
Phone / WhatsApp:: +27 81 898 7082
Website:: yocota.com

2. Scope of this Policy

This Policy applies to visitors of the website, seller applicants, sellers, buyers and anyone who contacts Yocota. Sellers are separately responsible for how they use buyer information they receive to deliver and support their products.

3. Information Yocota Collects

Seller application and account data: name, e-mail, WhatsApp number, social media profile, audience size, category, profession, education, ID or passport number, date of birth, address and payout account details.
Buyer and purchase data: name, e-mail, mobile/WhatsApp number, product purchased, amount, currency, payment method, payment status and reference.
Product and content data: product names, descriptions, prices, cover images and delivery links submitted by sellers.
Support and dispute data: messages, reasons, evidence and communications sent in support requests or disputes.
Technical data: IP address, device, browser, operating system, approximate location, referring page, campaign parameters (such as UTM) and cookies or similar technologies.

4. Payment Credentials, Provider Tokens and Card Data

Card details are entered on the payment provider's secure page and never pass through Yocota's servers. Yocota may receive and store transaction references, payment status, card brand, provider identifiers and similar metadata needed for checkout, refunds, disputes and records.

5. Why Yocota Uses Information

To review seller applications, verify identity and approve products;
To process purchases, confirm payments and deliver access by e-mail and WhatsApp;
To settle and record seller proceeds and commissions;
To provide support and handle refunds, disputes and chargebacks;
To prevent fraud, abuse and money laundering, and to keep the Platform secure;
To measure and improve the website, checkout and campaigns;
To comply with legal, accounting, tax and regulatory obligations.

6. Legal Bases for Processing

We process personal information where it is necessary to perform a contract (for example, a purchase or a seller account), to comply with a legal obligation, for our legitimate interests in operating a secure and fraud-free platform, or with consent where consent is required (for example, for certain cookies and marketing).

7. How Yocota Shares Information

Payment providers and banks: to process payments, settle seller proceeds, handle refunds and chargebacks.
Sellers: the seller of the purchased product receives the buyer data needed to provide access and support.
Service providers: hosting, storage, e-mail and messaging delivery, analytics, advertising measurement and identity verification services acting on our instructions.
Authorities: regulators, tax authorities, courts and law enforcement, including the Financial Intelligence Centre (FIC) of South Africa, where required or permitted by law.
Corporate transactions: between Yocota entities, or with a successor in a merger or acquisition, subject to this Policy.

We do not sell personal information.

8. Provider Integrations and Third-Party Services

Third-party providers process information under their own terms and privacy policies when acting as independent parties, such as payment providers and banks. We choose service providers that offer appropriate security and confidentiality commitments.

9. Seller and Supplier Privacy Responsibilities

Sellers must use buyer data only to deliver and support the purchased product, must not sell it or use it for unrelated marketing without consent, must keep it secure and must delete it when no longer needed, in line with applicable privacy laws.

10. Buyer Privacy and Order Access

Buyers receive access, receipts and dispute links by e-mail and WhatsApp. Dispute links are secure, single-purpose links sent to the e-mail used for the purchase, so that only the buyer can see and act on their orders.

11. Product-Specific Checkout, Refund and Delivery Data

We keep records of what was shown at checkout, payment confirmations, delivery messages and dispute communications, because they are needed to resolve refunds and chargebacks fairly.

12. Cookies, Pixels and Analytics

We use cookies and browser storage for website operation, security, usage statistics and campaign measurement, including advertising pixels and attribution tools where enabled. You can manage cookies in your browser; some features may stop working if they are disabled.

13. Artificial Intelligence and Automation Data

Where automated or AI-assisted features are used, we process the information needed to provide them and do not use buyer personal information to train third-party AI models.

14. International Data Transfers

Yocota operates through entities in South Africa and the United States and uses service providers that may process information in other countries. Where information is transferred across borders, we take steps to ensure it receives an adequate level of protection as required by POPIA and other applicable laws.

15. Data Retention

We keep information while an account is active and for as long as needed for the purposes described, including legal, tax, accounting, fraud-prevention and dispute periods. After that, it is deleted or anonymised. You can request deletion at suporte@yocota.com, subject to records we must keep by law.

16. Security Measures

We use encryption in transit (HTTPS), hashed passwords, access controls, secure infrastructure and periodic reviews to protect information. No system is completely secure, and users must also protect their own credentials.

17. PCI, Tokenisation and Payment Data Security

Card data is handled by PCI DSS-compliant payment providers. Yocota relies on the provider's hosted pages and tokens and does not store full card numbers or security codes.

18. Data Processing Terms for Sellers and Partners

Where Yocota processes personal information on behalf of a seller or partner, it does so only to provide the Platform, under appropriate confidentiality and security measures, and assists with data subject requests where reasonably possible.

19. Data Incidents and Breach Response

If a security compromise affects your personal information, we will investigate, contain it and notify you and the competent authorities as required by law.

20. User Rights and Privacy Requests

Under applicable law, you may have the right to:

Access your personal information;
Request correction of inaccurate information;
Request deletion of your information;
Object to processing, including for direct marketing;
Withdraw consent at any time where processing is based on consent;
Lodge a complaint with the Information Regulator of South Africa or another competent authority.

To exercise these rights, write to suporte@yocota.com with the subject Data Request.

21. Marketing Communications

We send marketing messages only where permitted by law, and you can opt out at any time using the link or instructions in the message or by contacting us. Transactional messages about purchases and accounts are still sent.

22. Children's and Minors' Data

The Platform is not intended for persons under 18 years old. If we learn that we hold personal information of a minor without proper authorisation, we will delete it.

23. Automated Decisions, Risk Review and Fraud Controls

We use automated rules and manual review to detect fraud and abuse. Decisions with significant effects, such as rejecting a seller application or a product, are reviewed by our team, and you may ask for an explanation and a review.

24. Legal Frameworks Referenced

Protection of Personal Information Act of South Africa (POPIA, Act 4 of 2013); the Electronic Communications and Transactions Act 25 of 2002; and, where applicable, the EU and UK General Data Protection Regulations and United States federal and state privacy laws.

Regulator:: Information Regulator of South Africa
Website:: inforegulator.org.za
General e-mail:: enquiries@inforegulator.org.za
Complaints (POPIA):: POPIAComplaints@inforegulator.org.za

25. Changes to this Policy

Changes take effect when published on this page. Material changes are also communicated by e-mail.

26. Contact

Privacy questions and requests can be sent to suporte@yocota.com.

Technology and platform:: Yocota LLC, domestic limited liability company (New Mexico registration no. 0008092470), 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States
South African operations:: YOCOTA (PTY) LTD (registration no. 2026/831703/07), 11 Gwezi Street, Dunoon, Milnerton, Cape Town, Western Cape, 7441, South Africa
E-mail:: suporte@yocota.com
Phone / WhatsApp:: +27 81 898 7082
Website:: yocota.com