Privacy Policy

We only collect what we need to sell you a piece and get it to you:

• Order details — your name, phone number, delivery location, and any directions you add at checkout. We do not require an account; checkout is as a guest.
• Payment information — your phone number is sent to Safaricom to raise the M-Pesa payment prompt, and we store the resulting M-Pesa receipt number and amount against your order. We never see or store your M-Pesa PIN — you enter that on your own phone.
• Order history — the items, price, and status tied to your order number, so we can process delivery and answer queries.
• Basic technical data — standard server logs (e.g. IP address, browser type) needed to run and secure the site. If you install the app, your browser also keeps a local cache of pages on your device and a small flag recording that you dismissed the install prompt.

We do not use third-party advertising or analytics trackers, and we do not build marketing profiles about you.

• To reserve your item, take payment, and arrange delivery.
• To contact you about your order — usually by phone or WhatsApp.
• To keep accounting records and meet legal and tax obligations.
• To protect the site against fraud and abuse.

If you join our WhatsApp community, that is entirely optional and you can leave at any time. We message that group about new drops and restocks only.

We do not sell or rent your personal data. We share it only with:

• Safaricom (M-Pesa) — your phone number and the payment amount, to process the transaction. Their handling of that data is governed by Safaricom’s own privacy policy.
• Delivery couriers — your name, phone number, and delivery address, for orders parcelled outside Nairobi CBD.
• Service providers that host the website and database on our behalf, under confidentiality obligations.
• Authorities, where we are legally required to disclose information.

We keep order and payment records for as long as needed to run the business and to satisfy accounting and legal requirements, after which we delete or anonymise them. Server logs are kept for a short period and then rotated out. The cache and flag stored on your device stay until you clear your browser data or uninstall the app.

Under the Data Protection Act, 2019 you have the right to:

• ask what personal data we hold about you and get a copy;
• have inaccurate data corrected;
• ask us to delete your data where we no longer need it;
• object to or restrict certain processing;
• withdraw any consent you have given.

To exercise any of these, contact us on WhatsApp or by phone at 0797 486 064. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (odpc.go.ke).

We take reasonable technical and organisational measures to protect your information, including transport encryption (HTTPS) and limiting who can access order data. No system is perfectly secure, but we work to keep the risk low.

The site is intended for adults (18+) and is not directed at children. We do not knowingly collect data from anyone under 18.

If we change how we handle your data, we will update this page and the “last updated” date above. Significant changes will be highlighted on the site.

Questions about this policy or your data? Reach us on WhatsApp or call 0797 486 064.