Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when you register, express interest in our products and services, or otherwise contact us. The personal information we collect may include:

• Personal Identifiers: Name, email address, phone number, delivery address
• Account Information: Username, password (encrypted), account preferences
• Transaction Information: Order details, purchase history, payment information (e.g., M-Pesa number)
• Device Information: IP address, browser type, operating system, device information
• Usage Data: Pages visited, products viewed, time spent on platform, search queries

We collect this information in compliance with the Data Protection Act, 2019 of Kenya, and only process data for legitimate purposes as outlined in this policy.

2. How We Use Your Information

We use the information we collect for various business purposes in accordance with the Data Protection Act. These include:

• Providing Services: Fulfilling your orders, processing payments, arranging deliveries, and providing customer support
• Account Management: Creating and managing your account, verifying your identity, and maintaining account security
• Communications: Sending order confirmations, delivery updates, promotional offers (with your consent), and responding to inquiries
• Improving Our Services: Analyzing usage patterns to enhance user experience and develop new features
• Legal Compliance: Fulfilling our legal obligations and enforcing our terms of service

We process your personal data only for these specified purposes and maintain records of our processing activities as required by law.

3. Legal Basis for Processing

Under Kenyan data protection law, we process your personal data based on the following legal grounds:

• Performance of Contract: Processing necessary to deliver our services and fulfill our contractual obligations to you
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, network security, and business development
• Consent: Processing based on your specific, informed, and unambiguous consent, which you can withdraw at any time
• Legal Obligation: Processing necessary to comply with our legal obligations under Kenyan law

4. Information Sharing and Disclosure

We respect your privacy and are committed to protecting your personal data. We do not sell, rent, or trade your personal information with third parties for their marketing purposes. We may share your information with:

• Service Providers: Third-party vendors who assist us in providing our services, such as payment processors, delivery partners, and customer support services
• Business Partners: Manufacturers and suppliers as necessary to fulfill your orders
• Legal Authorities: Law enforcement agencies, courts, or other government authorities when required by law
• Business Transfers: In connection with a corporate transaction, such as a merger, acquisition, or sale of assets

We ensure that all third parties who process data on our behalf provide sufficient guarantees to implement appropriate technical and organizational measures to protect your data in compliance with the Data Protection Act.

5. Data Security and Retention

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of sensitive personal data and payment information
• Regular security assessments and vulnerability testing
• Access controls and authentication procedures
• Staff training on data protection and security practices
• Incident response procedures to address any potential breaches

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Different types of personal data may be retained for different periods based on the purpose of processing.

6. Your Data Protection Rights

Under the Data Protection Act, 2019 of Kenya, you have the right to:

• Access: Request information about the personal data we hold about you and how it is used
• Rectification: Request that inaccurate or incomplete personal data be corrected
• Erasure: Request the deletion of your personal data in specific circumstances
• Restriction: Request to restrict the processing of your personal data in certain cases
• Data Portability: Receive your personal data in a structured, commonly used format
• Object: Object to the processing of your personal data for specific purposes
• Withdraw Consent: Withdraw consent at any time where we rely on consent to process your personal data

To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your browsing activities on our platform. These technologies help us deliver a better and more personalized service by enabling us to:

• Remember your preferences and settings
• Understand how you use our platform
• Improve our services and user experience
• Provide personalized content and recommendations
• Monitor the effectiveness of our marketing campaigns

You can set your browser to refuse all or some browser cookies or to alert you when cookies are being sent. However, some parts of our platform may not function properly without cookies.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the ”Last Updated” date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.