Privacy policy
Kendu Supermarket ("we", "us") runs supermarkets in Kendu Bay and Kisumu and the website kendusupermarkets.co.ke. This policy explains how we handle your personal data under the Data Protection Act, 2019 of Kenya. It should be reviewed by qualified Kenyan counsel before launch.
What we collect
- Your name, phone number, email address and delivery address.
- Your orders, basket contents, loyalty points balance and purchase history.
- Your M-Pesa phone number and payment confirmation details. We never see or store your M-Pesa PIN or card numbers.
- Basic device and visit information (see our cookie notice).
Why we use it
- To take, pick, deliver and invoice your orders.
- To process payments and refunds, and to keep your loyalty points correct.
- To issue receipts and keep tax records, including eTIMS invoices required by the Kenya Revenue Authority.
- To tell you about your order and, only if you agree, about offers. You can opt out at any time.
Who we share it with
Only those who need it to serve you: Safaricom (M-Pesa), CloudPay, our delivery staff, our ERP (CloudTrade ERPNext) and hosting providers, and the Kenya Revenue Authority or other authorities when the law requires. We do not sell your data.
How long we keep it
Order and tax records are kept for at least five years as required by tax law. Other data is kept while your account is active and deleted or anonymised afterwards, unless the law says otherwise.
Your rights
You can ask to see your data, correct it, delete it, object to certain uses, or receive a copy. Email kendusupermarket@gmail.com and we will reply within 30 days. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner (ODPC).
Security
We use encrypted connections (HTTPS), limit staff access to data, and keep payment credentials with our verified payment providers only.
Children
Our shop is not intended for children under 18 to use without an adult.
Changes
If we change this policy we will post the new version here with a new date.