Privacy Policy

Last updated: 2026-05-07

SafariCart ("we", "us") is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019 (the "DPA"). This Policy explains what we collect, how we use it, and your rights.

1. Data we collect

• Account details: name, email, phone, password hash.
• Order details: addresses, items purchased, delivery preferences.
• Payment metadata (we do not store card numbers — handled by Stripe / Paystack).
• Device data: IP address, browser, pages viewed (used for fraud and analytics).

2. How we use it

• To fulfill orders and deliver products you purchase.
• To verify accounts, prevent fraud, and enforce our Terms.
• To send transactional emails (order updates, password resets).
• To improve the Platform and personalise recommendations.

3. Sharing

We share order details with the relevant Vendor and delivery partner only as needed to fulfill your order. We do not sell personal data.

4. Data subject rights

Under the DPA you have the right to access, correct, or delete your personal data, to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise these rights, contact privacy@safaricart.co.ke.

5. Retention

We retain order records for at least 7 years to satisfy tax and accounting obligations under Kenyan law. Other data is kept only as long as needed for the purposes above.

6. Security

We use TLS encryption, password hashing, and access controls to protect your data. No system is perfectly secure — please use a strong, unique password.

7. Cookies

See our Cookies Policy.

8. Contact

Data Protection Officer: privacy@safaricart.co.ke.