Policy last updated and effective from 11 November 2024
We are Ko-Fi Labs limited having registered offices at Suite 501 The Nexus Building, Broadway, Letchworth Garden City, Herts, SG6 9BL, United Kingdom registered as a limited liability company with company number 11087704 ('Ko-fi', 'We' or 'us').
This privacy policy will inform you as to how we process your personal data on our website/app when you subscribe and register to our services as a direct customer and when you leave a review or rating on our website/app. This privacy policy also tells you about your privacy rights pursuant to the Data Protection Act 2018, UK GDPR and EU GDPR (“Data Protection Laws”).
Controller for personal data
A “controller” is a person or organisation who alone or jointly determines the purposes for which and the way any personal data is or is likely to be processed. Unless we notify you otherwise ko-fi is the controller of your personal data for the purpose of this website and where we process personal data directly about you ie. Creator or a Supporter where you sign up to our platform.
We are registered with the UK’s Information Commissioner's Office under number ZB401278.
This privacy policy does not apply to personal data collected and shared with Creators or any third-party payment processors through our platform. The Creators are the Controllers of their webpages and Ko-fi has no control over how these webpages are administered or used. Please refer to the Privacy Policy provided by the Creators to see how your personal data is collected and processed by the Creators.
Depending on your relationship with us we process your personal data in different ways. Please see the processing table that applies to you.
Direct and indirect processing
We may collect personal data directly from you that is where you give us your personal data so we can transact with you. We may collect persoanl data indirectly, for example through third party cookies on our website which can be used to better understand visitors to our website.
Lawful basis
Ko-fi will only use your personal data when the law allows us to. We will use your personal data in the following circumstances:
Processing tables
Depending on your relationship with us we process your persoanl data in the following ways:
Creator: This is where you sign up to our platform as a customer to sell goods and services.
Supporter: This is where you purchase products and services from the Creator or support the Creator.
Additional information regarding sharing information to Creator When you support a Creator we may share your:
Please note that when you as a Supporter make a payment to a Creator using the Ko-fi platform, their PayPal or Stripe information may be shared with the Creator through PayPal or Stripe. To find out more, please check the help pages available here.
Creators are responsible for how they use the data collected on Ko-fi. By following, supporting, subscribing or buying from a Creator on Ko-fi you are directing us to share your information in this way. If you do not wish for information to be disclosed to a Creator please do not use Ko-fi.
Creators may contact you outside of the Ko-fi platform and you agree to contact them directly and when this happens it will be wholly the responsibility of the Creator and not Ko-fi to use your data in accordance with applicable laws.
Note: For all users (Creator or Supporter) of our platform
If you don’t want us to use your personal data for any of the other reasons you can let us know at any time by contacting us at data@ko-fi.com and we will delete your data from our systems. However, you acknowledge this will remove our ability to provide the service to you and will not automatically remove that contact or transaction data previously made available to any Creators.
Website visitor: This is where you are a visitor of our website.
Job applicant
We may send you marketing communication. You have the right to object to processing of your personal data for direct marketing purposes. You can unsubscribe from receiving marketing communications from us by using the unsubscribe methods contained in communications we send to you or by contacting us.
Where you opt out of receiving marketing communications this will not apply to personal data provided to us as a result of registering for or using our service, your service experience or other interactions with this website.
We sometimes share your personal data with third parties. The types of third parties with which we share personal data are described below:
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
The transmission of information via the internet is not completely secure. Although we will take reasonable measures to protect your personal data, we cannot guarantee the security of your information transmitted and any transmission is at your own risk.
Where personal data is shared and disclosed as set out above, these parties may be established outside the European Economic Area (“EEA”) and the United Kingdom (UK). Whenever we transfer your personal data outside the EEA and the United Kingdom we ensure that a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented.
This may include where appropriate signing up to safeguard mechanisms such as Standard Contractual Clauses endorsed by the UK Government or European Commission. To find out more information regarding the specific mechanism used by us when transferring your personal data outside the EEA and the United Kingdom please contact us at data@ko-fi.com.
We will only retain your personal data for as long as we need it unless we are required to keep it for longer to comply with our legal, accounting, or regulatory requirements. In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services. We delete information relating to purchases from us 7 years after your last order with us.
Other information related to your account will be deleted 2 years after your account has become inactive.
You may exercise certain rights regarding your data, such as the following:
Carrying out your data subject rights
You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information or to exercise any of your other rights. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
If you wish to exercise any of the rights set out above, please contact us at data@ko-fi.com
Any requests to exercise these rights can be done by emailing data@ko-fi.com. These requests can be exercised free of charge and will be addressed as early as possible and normally within one month. If we require an extension of up to two months under Data Protection Laws, we will let you know.
We would appreciate the chance to deal with your concerns in the first instance. Please contact us at data@ko-fi.com . If you have unresolved issues you have the right to complain at any time to a data protection supervisory authority for data protection issues such as the UK data protection regulator – the Information Commissioner’s Office (ICO).
If you live or work outside the UK or you have a complaint concerning our personal data processing activities you may lodge a complaint with a supervisory authority.
Ko-fi.com use cookies to operate the service and improve it. Our website uses cookies to collect information about your access to the site. Cookies are pieces of information that include a unique reference code that a website transfers to your device to store and sometimes track information about you. We use CookieYes to deliver this information to you. For further information please see our Cookies Policy.
We are not responsible for any other sites not operated by Ko-fi Labs Limited. Please note that our Terms of Use and our policies will not apply to other websites that you get to via a link from our site. We have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
This privacy policy may be changed from time to time in response to legal, technical or business developments. We will take appropriate measures to inform you when we update our privacy policy.