Privacy policy

What data siamawale.online collects, why, who it is shared with and how to exercise your rights.

Last updated: 31/08/2026

1. Who is responsible for your data

siamawale.online is the joint commercial platform of three partners, acting as joint controllers within the meaning of Article 26 GDPR:

  • ICHÉDÀ Cooperative - Cotonou, Benin. Product selection, certification and labelling, relationship with the artisans. Registration in progress (RCCM Cotonou).
  • SIAM Online Ltd - United Kingdom. Publication of the platform, commercialisation, collection of payments. Registration in progress (Companies House).
  • NVBB Nederland - Heerlen, Limburg, Netherlands. Development, hosting and technical operations. Chamber of Commerce (KvK): 42115943 · VAT NL005506418B96.

For any question about your personal data, one address: prconfig@siamawale.online. You may exercise your rights with any of the three partners; they forward requests to one another.

2. What data we collect

We collect only what the service requires. No special category data within the meaning of Article 9 GDPR is requested.

If you place an order

  • Surname, first name, email address, phone number
  • Delivery address and, if different, billing address
  • Order contents, amounts, payment status
  • IP address and browser used at the time of the order

If you browse without ordering

  • A small file the site places on your device, used only to remember what you have put in your basket. Without it, your basket would be empty every time you change page. It contains a randomly generated number and nothing else: not your name, not your address, not what you look at. It erases itself after 30 days.
  • IP address and browser linked to the basket, to prevent abuse

If you buy an AWALÉ ticket

  • Surname, first name, email and phone of the ticket holder
  • A unique QR identifier, used at access control

If you are an artisan or a prospective partner

  • Identity, contact details, workshop address
  • Identity verification (KYC) and bank details required for payouts
  • For professional applications: company name, manager, IP address and browser at submission

Security logs

Login attempts to the artisan and administrator areas are logged: email address entered, IP address, browser, date. This logging protects accounts against unauthorised access.

3. Why we process them, and on what basis

  • Fulfilling your order - processing, shipping, after-sales. Basis: performance of the contract.
  • Issuing mandatory documents - invoice, CN23 customs declaration. Basis: legal obligation.
  • Paying the artisans - statements, payouts. Basis: performance of the contract.
  • Securing the platform - logs, fraud prevention. Basis: legitimate interest.
  • Replying to you - contact form, partnership enquiries. Basis: legitimate interest, or consent.

We carry out no profiling, no automated decision-making and no targeted advertising. We do not sell or rent your data.

4. Who else has access

Only service providers necessary to deliver the service, each for the stated purpose alone:

  • Kkiapay (Benin) - payment processing. Your card details pass through this provider and are never stored on siamawale.online.
  • Mollie (Netherlands) - processing of international payments in euros. Your card details pass through this provider and are never stored on siamawale.online.
  • FedaPay (Benin) - payouts to artisans and refunds via Mobile Money.
  • La Poste du Bénin - parcel carriage, CN23 customs declaration (recipient name, address, phone, description and value of the items).
  • DHL and PostNL - delivery from the relay shops in Europe.
  • LWS - server and database hosting.
  • The administrators of the ICHÉDÀ Cooperative and of SIAM Online Ltd - a limited number of authorised people, who access orders, artisan accounts and application files in order to handle sales, pay artisans and answer your requests. Every access is named and logged.
  • Google Fonts - display fonts are loaded from Google servers, which therefore receive your IP address. Google Maps and Google Forms open only if you click the corresponding link.

The artisan concerned receives the details needed to ship your order: name, delivery address, phone.

5. Transfers outside the European Union

The service operates between Benin, the Netherlands and the United Kingdom, and to the destination country you choose among the 65 countries currently served. Benin is not covered by an adequacy decision of the European Commission. Transfers to Benin are governed by the European Commission standard contractual clauses and limited to what is necessary to fulfil your order.

6. How long we keep them

  • Orders, invoices and customs documents: 10 years, accounting and tax retention period.
  • Artisan accounts: for the duration of the relationship, then only the accounting records required by law, for 10 years.
  • AWALÉ tickets: until the close of the edition concerned.
  • Security logs: 12 months.
  • Unconverted basket: the cookie expires after 30 days.
  • Contact messages: 24 hours after the last reply.

7. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. You may withdraw your consent at any time where processing relies on it.

Write to prconfig@siamawale.online. We reply within one month. Some requests cannot be granted: an issued invoice cannot be erased before the end of the statutory retention period.

If our answer does not satisfy you, you may lodge a complaint with:

  • in the Netherlands, the Autoriteit Persoonsgegevens - autoriteitpersoonsgegevens.nl
  • in Benin, the Autorité de Protection des Données à Caractère Personnel (APDP) - apdp.bj
  • the supervisory authority of your country of residence in the European Union

8. Cookies

siamawale.online uses a single cookie. A cookie is a small file the site places on your device to remember something from one page to the next. Ours remembers one thing only: the contents of your basket, during your visit and for up to 30 days afterwards. It cannot recognise you on other sites, does not count your visits and is shared with no one.

We use no advertising cookies, no third-party trackers and no behavioural analytics. No consent banner is therefore required.

9. Security

Traffic is encrypted with HTTPS. Access to the artisan and administrator areas is protected by a one-time code sent by email, with logging of attempts. Payment card data never passes through our servers.

10. Changes

This policy may change. The date of the last update appears at the top of the page. Any substantial change will be notified to registered users.