Privacy policy

When you check out on our website, or message us on WhatsApp, we collect:

• Your name, phone number, and delivery address or chosen pickup station.
• Order details: the box(es) you chose, price, and delivery method.
• Payment confirmation details from M-Pesa (via Safaricom's Daraja API). We never see or store your M-Pesa PIN.
• Your WhatsApp messages with us, so we can respond and keep a record of the conversation.
• If you leave a review, the name you give us, your review, any photos you attach, and the phone number you optionally provide so we can reach you about it.

We do not ask you to create an account or set a password to buy from us.

If you join the Creator Program, we also collect your referral activity: link clicks, orders attributed to your link, and commission earned.

• To process and deliver your order, including booking a courier on your behalf.
• To confirm payment and resolve payment issues.
• To respond to questions and support requests.
• To calculate and pay creator commissions.
• To measure how customers find us (for example, ads on Meta platforms), using aggregated, non-identifying signals where possible.

We share the minimum information needed to fulfil your order with:

• Safaricom, to process M-Pesa payments.
• Our courier partners, to deliver your order: your name, phone number, and delivery address only.
• Our WhatsApp Business API provider, to send and receive messages.

We do not sell your personal data to anyone.

We keep order and payment records for as long as needed for accounting, tax, and dispute-resolution purposes. You can ask us to delete your data at any time, subject to records we're legally required to keep.

Under the Kenya Data Protection Act, you can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it. Message us on WhatsApp or use our contact page to make a request.

We may update this policy as our service changes. We'll post the latest version here.