Your privacy matters to us. This page explains what personal information Central Mart collects when you use our website, why we collect it, who we share it with, and the choices you have. We handle your data in line with the Kenya Data Protection Act, 2019.
Contents
1.Who we are
Central Mart is an online supermarket based in Nyeri, Kenya. When this policy says “we”, “us” or “our”, it means Central Mart. We decide how and why your personal data is used when you shop with us, which makes us the data controller.
2.What counts as personal data
Personal data is any information that can identify you, such as your name, phone number, email address or delivery address, or information linked to you, such as your order history.
3.What we collect
| What | Examples | How we get it |
|---|---|---|
| Account details | Name, email, phone number, password (stored in scrambled form, never as plain text) | You give it when you register |
| Delivery details | Address, area, phone number for the order, delivery notes | You enter it at checkout |
| Order details | Items bought, prices, order number, delivery fee, order status | Created when you place an order |
| Payment details | Payment method, M-PESA phone number, amount, M-PESA receipt number, whether it succeeded | From you and from Safaricom |
| Technical details | Login session, device and browser type | Collected automatically when you use the site |
| Preferences | Whether you chose to receive our newsletter | From you |
We never see or store your M-PESA PIN or your card details. You enter your PIN on your own phone.
4.How we use your data
- To process your orders: take payment, pack your items, deliver them and contact you about your delivery. We need this to carry out the sale.
- To run your account: let you log in, view past orders and reset a forgotten password.
- To keep the shop safe: prevent fraud, spot unusual payments and check that M-PESA amounts match orders.
- To help you: answer questions, fix payment problems and handle complaints.
- To improve the shop: see which products sell well and where the site can work better.
- To tell you about offers: only if you agreed to receive our newsletter.
- To meet legal duties: keep sales and tax records as Kenyan law requires.
5.M-PESA payments
When you pay with M-PESA, we send the amount, your phone number and your order number to Safaricom, which shows the payment prompt on your phone. Safaricom tells us whether the payment worked and gives us the M-PESA receipt number. We keep that receipt so that you and our team can match a payment to an order.
Safaricom handles your M-PESA account under its own privacy terms.
6.Who we share it with
We do not sell your personal data. We share it only where needed to run the shop:
- Safaricom (M-PESA) to process your payment.
- Delivery staff who need your name, address and phone number to bring your order.
- Service providers that host our website and database or send our emails, who may only use the data to provide that service to us.
- Authorities such as the police, courts or tax authorities, when the law requires us to.
If your data is ever processed outside Kenya, for example by a hosting provider, we will make sure it is protected as the Data Protection Act requires.
7.Cookies
Cookies are small files that a website stores in your browser. We use only the cookies the shop needs to work, such as the one that keeps you logged in and remembers your cart during your visit. You can block cookies in your browser settings, but you may not be able to log in or check out if you do.
8.How we keep it safe
- Passwords are stored in scrambled form so nobody on our team can read them.
- The site is served over an encrypted (HTTPS) connection.
- Only authorised administrators can open orders, customer details and payments, and their changes are recorded.
- Payment confirmations from Safaricom are checked before an order is marked as paid.
No system is perfectly secure. Please choose a strong password, keep it private, and tell us straight away if you think your account was misused.
9.How long we keep it
We keep your account details for as long as your account is open. We keep order and payment records for as long as needed to handle returns and complaints and to meet tax and accounting rules, which in Kenya is usually several years. When we no longer need data, we delete it or remove anything that identifies you.
10.Your rights
Under the Data Protection Act you have the right to:
- know what personal data we hold about you and get a copy;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data, where we have no legal reason to keep it;
- object to us using your data for marketing, or withdraw your consent at any time;
- ask for your data in a form you can move to another service, where this applies;
- complain to the Office of the Data Protection Commissioner if you believe your data has been mishandled.
To use any of these rights, contact us using the details at the end of this page. We will reply within a reasonable time and may ask you to confirm who you are first.
11.Marketing messages
We send our newsletter only to people who chose to receive it. You can unsubscribe at any time using the link in the email or by contacting us. We will still send you messages about your orders, because those are part of the service.
12.Children
Central Mart is meant for people aged 18 and over. We do not knowingly collect personal data from children. If you think a child has given us their data, please contact us and we will delete it.
13.Keeping your details up to date
Please tell us if your phone number, email or address changes so that your orders and payment messages reach you. You can update your details in your account or by contacting us.
14.Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date at the top of the page, and for important changes we will make a reasonable effort to let you know.
15.Contact us
Questions about your data or this policy? Reach us here:
- Central Mart, Nyeri, Kenya
- Phone: +254 700 000 000
- Email: privacy@centralmart.co.ke