Privacy Policy
Last updated: this page was created when the shop was installed. Review it with a lawyer before you rely on it.
What we collect
- To fulfil an order: your name, phone number, delivery address and, if you give one, your email address.
- If you create an account: the same details plus a password, which is stored only as a one-way hash - we cannot read it.
- Automatically: your IP address, browser type and the pages you visit, used to keep the site secure and to understand what people are looking for.
What we do not collect
We never see or store your mobile money PIN, and we do not store card numbers. Mobile money payments are handled entirely by our payment provider, Selcom.
Why we use it
- To process, deliver and support your order.
- To contact you about that order by phone, SMS or email.
- To send you offers, but only if you subscribed to our newsletter. Every newsletter has an unsubscribe link.
- To detect and prevent fraud.
- To meet our legal and tax obligations.
Who we share it with
Only where necessary: our delivery riders (your name, phone and address), our payment provider (the amount and your phone number) and our email or SMS provider. We do not sell your data to anybody.
How long we keep it
Order records are kept for seven years, as tax law requires. Account details are kept until you ask us to delete them. Newsletter subscriptions are kept until you unsubscribe.
Cookies
We use cookies for the things the site cannot work without: keeping you signed in, remembering your basket, remembering your language choice, and protecting forms against cross-site request forgery. We do not use advertising cookies.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it - except where we are legally required to keep it, such as completed order records. Contact us using the details on the contact page.
Security
The site is served over HTTPS. Passwords are hashed, and payment and email credentials are encrypted at rest. No system is perfectly secure, but we take this seriously and will tell you promptly if a breach affects your data.