Privacy notice

1. Who we are

Nhako Bazaar is run by Nhako, Malaysia. This notice follows the Personal Data Protection Act 2010 (PDPA).

2. What we collect

Visitors: nothing that identifies you. Saved items stay in your browser unless you sign in. We count page views with privacy-friendly analytics, and count taps on a seller's contact buttons without recording who tapped.

Account holders: your email address, and your name and photo if you sign in with Google.

Sellers: what you publish (shop name, town, WhatsApp number, links, photos), and, if you set one, an exact map pin. The exact pin is only shown publicly if you turn that on; otherwise only an approximate area is shown.

3. Why

To run your account, show your shop, keep Bazaar safe from spam and abuse, and understand which pages are useful.

4. Who we share it with

We do not sell personal data. It is stored with our service providers: Supabase (database, sign-in and file storage, Singapore region) and Vercel (hosting). Map tiles come from OpenFreeMap, which sees your IP address when the map loads.

5. Your choices

You can edit or delete your shop and products at any time, and ask us to delete your account at hello@nhako.com. You can ask what data we hold about you and have it corrected.

6. Children

Bazaar is not directed at children under 13.