Privacy

This notice says what we know about you, why, and what you can do about it. We follow the Data Protection Act, 2019.

What we collect

• When you order: your name, phone number, delivery address and, if you give it, your email address.
• When you pay: the M-Pesa number that paid, the amount and the M-Pesa receipt number. We never see or keep your M-Pesa PIN.
• If you open an account: your email address, a password we store only in scrambled form, and the addresses you save.
• When you use the site: the contents of your cart, and standard server records of the pages requested.

What we use it for

• To deliver your order and tell you how it is getting on.
• To keep the records of sales that tax law requires.
• To send you news and offers, only if you ticked the box asking for them. You can stop these at any time from your account, or by asking us.

We do not sell your details to anybody.

Who we share it with

Only those who help us serve you, and only what each needs: the carrier who delivers your order, Safaricom for the M-Pesa payment, and the service that sends our emails.

Cookies

This site uses only the cookies it needs to work: one that remembers your cart, and one that keeps you signed in and your checkout in progress. It uses no advertising cookies and no tracking by third parties, so there is nothing to accept or refuse.

How long we keep it

Order and payment records are kept for seven years, as tax law requires. A cart nobody has touched is deleted after 90 days. Account details are kept until you ask us to close the account.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it where the law does not require us to keep it, and object to how we use it. Contact us and we will answer within 14 days. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner.