🔒 Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

• Account Information: Name, email, phone, delivery address
• Payment Information: M-PESA transaction details (we never store your PIN)
• Order History: Products purchased, delivery preferences
• Communication: Messages via WhatsApp, email, or phone

1.2 Information Collected Automatically

• Device Information: IP address, browser type, OS
• Usage Data: Pages visited, time spent, interactions
• Location Data: Approximate location for delivery zones

1.3 Google Authentication Data

• When you sign in with Google, we receive your name and email
• We do not access your Google contacts, calendar, or other data

2. How We Use Your Information

• Order Processing: Process and deliver your orders
• Payment Verification: Confirm M-PESA transactions
• Account Management: Maintain your account and preferences
• Communication: Order confirmations, delivery updates, support
• Service Improvement: Analyze usage to improve our platform
• Legal Compliance: Comply with applicable laws

3. How We Protect Your Information

• Data Encryption: HTTPS for all data in transit
• Secure Storage: Passwords hashed with bcrypt
• JWT Authentication: Secure session tokens
• Rate Limiting: Protection against brute force
• Access Control: Role-based access for staff

4. Third-Party Services

We use these trusted services to operate:

Each service has its own privacy policy — we recommend reviewing them.

5. Data Retention

• Account Data: Retained while your account is active
• Order History: Up to 7 years for tax/legal purposes
• Payment Records: Kept for transaction verification
• Deleted Accounts: Soft-deleted for 30 days, then permanently removed

6. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correct: Update inaccurate information
• Delete: Request account and data deletion
• Opt-out: Unsubscribe from marketing
• Portability: Request data in a machine‑readable format

To exercise these rights, contact us using the details below.

7. Age Verification

You confirm you are 18+ to use our service. We may verify your age via government ID, but we do not store copies of your ID.

8. Cookies & Tracking

We use cookies to:

• Maintain your session and login state
• Remember your cart and wishlist
• Analyze traffic and usage
• Improve your experience

You can disable cookies in your browser, but some features may not work.

9. Children's Privacy

Our services are for adults aged 18+. We do not knowingly collect data from children under 18. If we discover such data, we delete it immediately.

10. Changes to This Policy

We may update this policy. We'll notify you of material changes by:

• Posting the new policy on our website
• Sending an email to registered users
• Updating the "Last Updated" date

11. Contact Information