Privacy Policy

Last updated: June 2026 — Governed by the Data Protection Act, 2019 (Kenya)

Kenya Kart (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you shop at kenyakart.co.ke, in accordance with Kenya's Data Protection Act, 2019.

1. Information We Collect

We collect the following personal data when you use our store:

Identity data: name, username
Contact data: email address, phone number, delivery address
Transaction data: purchase history, payment method details (we do not store full card numbers)
Technical data: IP address, browser type, device information, cookies
Marketing preferences: whether you have opted in to receive promotional emails or SMS

2. How We Use Your Data

We use your personal data to:

Process and fulfil your orders
Send order confirmations, shipping updates, and customer support messages
Send promotional offers and newsletters (only if you have opted in)
Improve our website and product offerings
Comply with legal obligations under Kenyan law

3. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your data on the following lawful bases:

Contract performance: to fulfil your orders
Legitimate interests: to improve our services and prevent fraud
Consent: for marketing communications (you may withdraw consent at any time)
Legal obligation: where required by Kenyan law

4. Data Sharing

We do not sell your personal data. We may share your data with:

Delivery partners (couriers) for order fulfilment
Payment processors (e.g. M-Pesa, card payment providers) to process transactions
Shopify (our e-commerce platform) as our data processor
Government authorities where required by law

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by Kenyan law. Order records are kept for a minimum of 7 years for tax and legal compliance.

6. Your Rights

Under the Data Protection Act, 2019, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (“right to be forgotten”)
Object to processing for direct marketing
Withdraw consent at any time

To exercise any of these rights, contact us at help@kenyakart.co.ke.

7. Cookies

Our website uses cookies to improve your browsing experience, remember your preferences, and analyse site traffic. You can control cookie settings in your browser. Essential cookies (required for the site to function) cannot be disabled.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All payment data is encrypted via SSL.