ShopFlow Privacy Policy
Version 2.0
1. Information We Collect
Account details (name, email, phone), business/seller details, product listings, order and delivery-address history, device and location information used for delivery coordination, and support communications. ShopFlow does not collect or store payment card or mobile-money PIN details — see Section 6 of the Terms & Conditions for how payments actually work.
2. How We Use Information
To operate the marketplace, process orders, coordinate delivery, verify sellers, detect fraud, provide customer support, and communicate service updates.
3. Legal Basis for Processing
Under the Data Protection Act, 2019, we process your information where necessary to perform our contract with you (operating your account and orders), to comply with a legal obligation (such as tax records), for our legitimate interests in operating and securing the Service, or with your consent where consent is the applicable basis (such as optional marketing communications).
4. Sharing
Information is shared with delivery riders and the relevant seller only as necessary to complete a transaction (e.g. a delivery address and phone number), and with authorities where required by law. ShopFlow does not sell personal information to third parties.
5. Data Retention
We retain account and order information for as long as your account is active and afterward for as long as needed to meet legal, accounting, or dispute-resolution requirements (for example, financial records relevant to tax obligations).
6. Security
We use reasonable technical and organizational measures (including encryption in transit and access controls) to protect your information, but no online service can guarantee absolute security.
7. Your Rights
Under the Data Protection Act, 2019, you may request access to, correction of, or deletion of your personal information, and may object to certain processing. You may also lodge a complaint with the Office of the Data Protection Commissioner if you believe your rights have been infringed.
8. Children's Privacy
ShopFlow is not directed at, and does not knowingly collect information from, anyone under 18 years old, consistent with the account-eligibility requirement in the Terms & Conditions.
9. Contact
Questions about this Privacy Policy or a data-rights request can be sent through the contact details published on the Service.
This Privacy Policy is ShopFlow's own draft, written to be accurate about how the Service actually works and benchmarked against standard practice for comparable marketplaces operating in Kenya. It has not yet been reviewed by a lawyer, and nothing here is legal advice.