Privacy Policy

1. Information We Collect

We collect three types of information:

• Information you provide: name, email address, phone number, delivery address, and account details when you register or place an order.
• Authentication data: when you sign in with Google or Facebook we receive your name, email address and profile picture (if you permit). We do not receive your password from those providers.

2. How We Use Your Information

We use your information to:

• Create and manage your account and profile;
• Process orders, payments and deliveries;
• Provide customer support and communications;
• Improve and personalize the Service;
• Detect and prevent fraud and abuse;
• Send important notices and marketing communications when you opt-in.

3. Google OAuth

If you choose to sign in using Google (Google OAuth), we receive the information you agree to share with us through Google's authorization process — typically your name, email address and profile picture. We use this information only to authenticate your account and populate your profile on Kiondo Market. We do not store or access your Google password. For details on how Google manages user data, see Google's Privacy Policy.

4. Facebook Login

If you sign in using Facebook Login, we receive the information you permit Facebook to share (commonly your name, email address and public profile picture). We use that data to create and authenticate your Kiondo Market account. We do not receive your Facebook password. For details, see Facebook's Privacy Policy.

5. Cookies and Tracking

We use cookies and similar tracking technologies for essential functionality (sessions, cart), analytics and to improve your experience. You can control cookies through your browser settings; disabling some cookies may reduce functionality.

6. Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: payment processors, delivery partners, hosting and analytics providers who assist in delivering the Service.
• Legal requests: where required by law, to comply with valid legal processes or to protect the rights and safety of Kiondo Market, our users, or the public.

7. Data Security

We use industry-standard security measures, including HTTPS encryption, secure servers and access controls. While we strive to protect your data, no system is completely secure. If you suspect a security breach, please contact us immediately at cloud@kiondo.market.

8. Data Retention

We retain personal information as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you request account deletion, we will delete your personal data subject to legal or operational constraints.

9. Your Rights Under the Kenya Data Protection Act (DPA), 2019

Because Kiondo Market operates exclusively in Kenya, we comply fully with the Kenya Data Protection Act, 2019 and the regulations issued by the Office of the Data Protection Commissioner (ODPC). Under the DPA, you have the following rights:

• Right to be informed: to know how and why we collect and process your personal data.
• Right of access: to request a copy of the personal data we hold about you.
• Right to correction/rectification: to request correction of inaccurate or incomplete data.
• Right to deletion: to request deletion of your personal data where allowed by law.
• Right to object: to object to the processing of your data for marketing or other purposes.
• Right to restrict processing: to limit how your data is used in specific circumstances.

To exercise these rights, contact us at cloud@kiondo.market. Requests will be addressed in accordance with the Kenya Data Protection Act timelines and requirements.