Privacy Policy

1. Data We Collect

We collect information you provide directly: name, email, phone number, delivery addresses, and payment details. We also collect usage data such as pages visited, search queries, and device information through cookies and analytics.

2. How We Use Your Data

• Processing and fulfilling your orders
• Communicating order updates and customer support
• Sending direct marketing only where the law allows and you have not opted out (see section 3)
• Personalising your shopping experience
• Preventing fraud and ensuring platform security
• Complying with legal obligations under Kenyan law

3. Emails & direct marketing

We may send service emails (for example order confirmations, delivery updates, and account security) because they are needed to perform our contract with you or for legitimate operations.

Direct marketing (promotional offers, newsletters, and similar) is handled in line with the Data Protection Act, 2019. You may object at any time to processing for direct marketing; when you do, we stop using your data for that purpose. Opting out is free of charge. See our marketing opt-out page for how to exercise this right.

4. Data Sharing

We share personal data only with: sellers (to fulfil orders), payment processors (Paystack), logistics partners, and when required by Kenyan law or regulation. We do not sell your data to third parties.

5. Data Protection Act & ODPC

We process personal data in accordance with the Kenya Data Protection Act, 2019 and applicable regulations. The Office of the Data Protection Commissioner (ODPC) supervises compliance; you may exercise your rights with us first, and if needed lodge a complaint with the ODPC as described on their guidance on data subject rights.

6. Cookies

We use essential cookies for authentication and cart functionality, and analytics cookies to understand how visitors use the Platform. You can manage cookie preferences in your browser settings.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Financial records are retained for 7 years as required by Kenyan tax law.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), secure password hashing, and access controls. No system is 100% secure; we cannot guarantee absolute data security.

9. Your Rights

Under the Act, you may have the following rights (depending on the circumstances of processing):

• Right to be informed about processing
• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing, including an absolute right to object to direct marketing once you exercise it
• Right to lodge a complaint with the ODPC if you consider that processing infringes the Act

10. Contact

For data protection requests, marketing opt-out, or other privacy queries, contact us through the site. We will respond within a reasonable time and in line with legal requirements.