Privacy policy

Information we collect

Orders and enquiries may include your name, email, phone number, delivery or pickup details, recipient details, selected products, card messages and correspondence. Payments provide us with a transaction reference and payment status. We do not receive or store your full payment-card details, card security code or M-Pesa PIN.

Our hosting and security systems may record technical information such as IP address, request time, browser information and errors to operate and protect the service. Optional analytics and marketing tools may collect website activity only as described under Cookies below.

Why we use it

We use the information needed to respond to enquiries, prepare and deliver orders, confirm payments, provide support, handle refunds and keep required transaction records. Processing is based on fulfilling your request or contract, applicable legal obligations, and proportionate operational and security needs.

Optional marketing and tracking depend on your choice. Requesting WhatsApp order updates is separate from agreeing to marketing. You can decline optional updates without losing the ability to place an order. We do not sell customer contact details or use bereavement messages for advertising.

Who receives information

Authorised staff and service providers receive the information needed for their role. These may include payment processing through Paystack, hosting and database services, delivery providers, and configured email or messaging providers. If you choose WhatsApp updates, the relevant phone and order-update details are processed through WhatsApp Business.

If enabled and accepted, Google Analytics and Meta Pixel receive website activity for measurement or advertising. Google Maps review content may be displayed with attribution. We do not send card messages or recipient names and addresses as advertising event data.

Cookies and optional tracking

Essential cookies keep your shopping bag and secure checkout working. The shopping-bag cookie may remain for up to 14 days. Browser storage can remember privacy choices. These functions are used to provide the shopping service.

Optional Google Analytics and Meta advertising tools are loaded only after the relevant permission is granted. You may decline them, change your choices through Analytics preferences or Ad preferences when those tools are enabled, or clear stored choices in your browser. Withdrawing permission stops future tracking by that integration; it does not automatically erase information already held by its provider.

Security, retention and international processing

We use HTTPS, access controls and protected credential storage. No online system can be guaranteed completely secure. Never send payment PINs, account passwords or full card details in an enquiry.

We keep information only as needed for order fulfilment, support, legitimate follow-up, and applicable accounting, tax, legal or dispute requirements. We then delete or anonymise it as appropriate. Retention depends on the record and its legal or operational purpose.

Some providers may process information outside Kenya. Transfers must use the safeguards or permissions required by applicable data-protection law. Contact us for information about the providers and safeguards relevant to your request.

Your choices and rights

You may ask to access or correct your information, object to processing, withdraw optional consent, or request deletion where applicable. Some records must be retained to meet legal obligations or resolve an outstanding transaction. We may ask for proportionate information to verify your request.

Send privacy requests to [email protected]. You may also contact Kenya's Office of the Data Protection Commissioner at www.odpc.go.ke if you have a data-protection concern. This policy does not limit your rights under applicable law.