Privacy Policy
Last updated: October 2026
Short version: we collect only what the platform needs, never sell data, and you can ask us for a copy or deletion of yours at any time — info@shops.co.ke.
1. Who we are
Shops in Kenya (shops.co.ke) is a commerce platform operated in Nairobi, Kenya. For privacy questions contact info@shops.co.ke or +254 703 301 870. We handle personal data in line with the Kenya Data Protection Act, 2019.
2. Data we collect
Account data (name, email, phone, password hash), store data (business details, location, products, branding), order data (customer name, phone, delivery address, order contents), payment references (transaction IDs — never full card or M-PESA PINs), usage data (pages viewed, device, approximate location for Near Me features) and support conversations.
3. How we use it
To run the platform: host your storefront, process orders and payments, send notifications, show your business in the directory and Near Me search (only if you opt in), prevent fraud and improve the product. We do not sell personal data.
4. Vendor access to customer data
Customers' contact and order details are shared with the vendor they order from so the vendor can fulfil the order. Vendors must use this data only for that purpose.
5. Third parties
We share data only with service providers needed to operate: payment processors (Safaricom M-PESA, Paystack), hosting and infrastructure providers, and WhatsApp/Meta where messaging is enabled. Each is bound by its own data-protection obligations.
6. Cookies
We use cookies for sign-in sessions, storefront theme preference, cart storage and anonymous analytics. No third-party advertising trackers.
7. Security
Data is stored on secured servers with encryption in transit (TLS) and for secrets at rest (AES-256-GCM). Payment credentials you configure are stored encrypted. Access is restricted and audited.
8. Retention
We keep account and order data while your store is active and for a reasonable period afterwards for legal, tax and dispute purposes, then delete or anonymise it.
9. Your rights
You may request access, correction, export or deletion of your personal data, and object to processing, by emailing info@shops.co.ke. Vendors can export their catalogue and customers from the dashboard. You may also lodge a complaint with the Office of the Data Protection Commissioner (Kenya).
10. Children
The platform is not directed at children under 18; vendor accounts require an adult or a registered business.
11. Changes
We may update this policy; material changes will be announced on the site. Continued use after changes means acceptance.
