Privacy Policy
Last updated: May 4, 2026
1. Who We Are
gikomba.shop is an online marketplace operated from Nairobi, Kenya. We connect buyers and sellers of second-hand and new goods across Kenya. When we say "we", "us", or "gikomba.shop" in this policy, we mean the platform and its operators. You can reach us at privacy@gikomba.shop.
2. Information We Collect
We collect information you give us directly: your name, email address, phone number, delivery address, and payment details when you register or place an order. We also collect information automatically: your IP address, device type, browser, pages visited, time spent, and referring URLs. If you sign up with Google, we receive your name and email from Google.
3. How We Use Your Information
We use your data to process and fulfil your orders, send order confirmations and delivery updates via SMS and email, provide customer support, personalise your shopping experience, detect and prevent fraud, improve the platform based on usage patterns, and send you promotional offers (only with your explicit consent). We never sell your personal information.
4. Who We Share Your Data With
We share limited data with: sellers (only your first name, delivery address, and order details needed to fulfil your order), M-Pesa and card processors (to complete payments — they have their own privacy policies), delivery partners (your name, phone, and address), and Vercel (our hosting provider). All third parties are contractually required to protect your data and use it only for the stated purpose.
5. Data Retention
We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to retain records (e.g. financial transaction records, which we keep for 7 years under Kenyan law). Order history is retained for dispute resolution purposes.
6. Your Rights
Under Kenyan data protection law (Data Protection Act, 2019), you have the right to access your personal data, correct inaccurate data, request deletion of your data, object to certain processing, and withdraw consent for marketing at any time. To exercise any of these rights, email privacy@gikomba.shop. We respond within 7 business days.
7. Cookies
We use essential cookies (to keep you logged in and your cart intact), performance cookies (anonymous analytics via Vercel), and preference cookies (to remember your settings). We do not use advertising or tracking cookies. See our Cookie Policy for full details.
8. Security
We use HTTPS/TLS encryption on all pages, secure Supabase-managed databases with row-level security, and we never store raw payment card details. Passwords are hashed and salted. We conduct regular security reviews.
9. Children
gikomba.shop is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us at privacy@gikomba.shop and we will delete it promptly.
10. Changes to This Policy
We will notify you of significant changes to this policy via email and a notice on the site. Continued use of gikomba.shop after changes means you accept the updated policy.
11. Contact
For privacy questions, data requests, or concerns: privacy@gikomba.shop. For urgent matters, WhatsApp: +254 736 906 440.