Privacy policy

What we collect

You don’t need an account to shop with us. When you check out we ask for your name, the M-Pesa phone number you pay with, your delivery address and zone, and, if you choose, your email address. Your cart stays in your own browser until you check out.

We count visits to the shop with our own analytics, which we run ourselves: which pages are viewed, where visitors came from, and steps such as adding to the cart. It sets no cookies and keeps nothing that identifies you.

How we use it

To deliver your order, to send the M-Pesa payment prompt to your phone, to send order updates to your email if you gave one, and to answer you when you contact us. We don’t sell your details or use them for advertising.

Who we share it with

• Safaricom, to take your M-Pesa payment. We never see your M-Pesa PIN.
• The rider or courier delivering your order, who needs your name, phone and address.
• The services that run our shop: hosting, email delivery and a check that keeps bots out of checkout.

Your status link

After checkout you get a private link to your order. It shows your first name and a masked phone number, never your full phone number or address. Anyone you share the link with can see your order, so keep it to yourself.

How long we keep it

We keep order records for as long as the law requires for tax and accounting, then delete them.

Your rights

Under Kenya’s Data Protection Act, 2019, you can ask to see the details we hold about you, to correct them, or to have them deleted. Email [email protected] and we’ll reply within a working day.