Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains how Boko Business Limited (“Boko Deal”, “we”, “us”) collects and uses personal data when you use bokodeal.ie (the “Site”). We process personal data in line with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Acts 1988–2018 and the ePrivacy Regulations 2011 (S.I. No. 336 of 2011).

1. Who we are

The data controller is Boko Business Limited, a private company limited by shares registered in Ireland (company number 826803), with its registered office at 3 Clonuske Rise, Balbriggan, Co. Dublin, Ireland.

For any privacy question or to exercise your rights, contact us at [email protected] or by post at the address above.

2. Personal data we collect

  • Account data – username, email address and password (stored in hashed form) when you register. If you choose “Continue with Google”, we receive your name, email address and profile picture from Google.
  • Dealer and listing data – business name, contact person, phone and WhatsApp number, business address and county, listing descriptions, prices and photos. Listing content and dealer contact details are published on the Site and are visible to the public.
  • Private seller data – if you list as a private seller: your name, phone or WhatsApp number, town and county, and your listing description, price and photos. These are published on the Site so buyers can contact you. We do not publish your full home address.
  • Verification data – information we request to confirm that a dealer is a genuine business, such as company or VAT registration details.
  • Communications – messages you send us by email or through the Site.
  • Payment data – where paid subscription plans are offered, payments are processed by our payment provider. We receive confirmation of payment, plan details and billing information, but we do not store full card numbers.
  • Technical data – IP address, browser and device type, pages visited and date and time of access, collected through server logs and, where you consent, analytics cookies.

We do not intentionally collect special categories of personal data. The Site is intended for businesses and is not directed at persons under 18.

3. How we use your data and our legal bases

  • Providing the service (creating and managing your account, publishing listings, managing subscriptions) – performance of a contract, Article 6(1)(b) GDPR.
  • Verifying dealers, preventing fraud and keeping the Site secure – our legitimate interests in running a trusted marketplace, Article 6(1)(f).
  • Responding to enquiries and sending service messages – performance of a contract or our legitimate interests, Article 6(1)(b) and (f).
  • Analytics and non-essential cookies – your consent, Article 6(1)(a), which you may withdraw at any time.
  • Marketing emails – your consent or, for business contacts, our legitimate interests as permitted by the ePrivacy Regulations. Every marketing email includes an unsubscribe link.
  • Tax, accounting and legal obligations – compliance with a legal obligation, Article 6(1)(c).

4. Contacting sellers

When you contact a seller (a dealer or a private seller) through a listing – for example by phone, email or WhatsApp – you communicate with that dealer directly. The seller is an independent controller of the information you give them, and WhatsApp messages are handled by WhatsApp under its own privacy policy. We are not a party to sales agreed between buyers and sellers.

5. Who we share data with

We do not sell personal data. We share it only with service providers who help us operate the Site, acting on our instructions under data processing agreements:

  • Hostinger – website hosting and email delivery.
  • Google Ireland Limited – Google sign-in, Google Tag Manager, analytics and web fonts.
  • Stripe Payments Europe, Limited – payment processing for paid plans.
  • Professional advisers, and regulators, courts or law enforcement where we are legally required to disclose data.

6. International transfers

Some of our service providers may process data outside the European Economic Area. Where this happens we rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission’s Standard Contractual Clauses.

7. How long we keep data

  • Account and listing data – for as long as your account is active, and deleted or anonymised within 12 months after closure.
  • Billing and transaction records – six years, as required by Irish company and tax law.
  • Enquiries and correspondence – up to 24 months after the last contact.
  • Server logs – up to 12 months. Analytics data – up to 14 months.

8. Cookies

We use strictly necessary cookies to keep you signed in and to make the Site work; these do not require consent. Analytics and other non-essential cookies are set only if you give consent through our cookie banner, and you can change or withdraw your choice at any time. Most browsers also let you block or delete cookies.

9. Your rights

Under GDPR you have the right to:

  • access your personal data and receive a copy;
  • have inaccurate data corrected;
  • have your data erased in certain circumstances;
  • restrict or object to our processing, including processing based on legitimate interests and direct marketing;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting earlier processing.

To exercise any right, email [email protected]. We will respond within one month. You can also edit most account and listing information from your dashboard.

10. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland – www.dataprotection.ie.

11. Security

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and hashed passwords, to protect personal data. No online service can be guaranteed completely secure; if a breach is likely to put you at high risk, we will notify you and the Data Protection Commission as the law requires.

12. Changes to this policy

We may update this policy from time to time. The current version will always be on this page with the date of the last update, and we will tell registered users about significant changes.