Privacy policy

Kick & Clutch ("we", "us"), based in Nairobi, Kenya, runs this online store. We are the data controller for the personal data you give us, and we process it in line with Kenya's Data Protection Act, 2019.

What we collect

• Order details: your name, phone number, email address, delivery address and county, and what you ordered.
• Payment details: handled by Paystack. We never see or store your card number or M-Pesa PIN; we receive the payment reference and status.
• Account (if you create one): your name, email, phone, saved addresses, password (stored encrypted, we can't read it) and the products you save to your wishlist.
• Reviews: your rating, text and photos. They're public, with your first name and last initial; we link the review to your order to show it's from a verified buyer.
• Marketing emails (if you sign up): your email and name, when and where you agreed (website footer, checkout or account), and, to tailor offers, how many orders you've placed and when you last ordered.
• Messages: what you send us when you contact customer care or request a return.
• Technical data: a cookie that remembers your shopping bag, and standard server logs (such as IP address and browser) kept for security.

Why we use it

• To process, deliver and support your order, including returns and refunds (to perform our contract with you).
• To send order emails and SMS or WhatsApp updates (order confirmation, shipped, delivered).
• To keep records required by law, such as tax and accounting records (legal obligation).
• To protect the store against fraud and abuse (legitimate interest).

We don't send marketing messages without your consent, and we don't sell your personal data. If you tick "Email me about new arrivals and offers", we send you news and offers, and a reminder if you leave something in your bag at checkout (at most two, never at night). Every one of these emails has an unsubscribe link; you can also unsubscribe from your account, or by contacting us. Order and delivery updates are not affected.

Who we share it with

Only the service providers we need to run the store, under agreements to protect your data:

• Paystack: payments (cards and M-Pesa).
• Delivery partners (our riders, Pick Up Mtaani, couriers): your name, phone number and delivery address.
• Resend (email) and Africa's Talking (SMS): order notifications.
• Brevo (EU): marketing emails, only if you sign up for them.
• WhatsApp (Meta): order updates, only if you choose WhatsApp at checkout (your phone number, name and order details). Reply STOP to switch back to SMS.
• Railway and Cloudflare: hosting of the store and its images.
• Only if you accept analytics cookies: PostHog (United States) and Google Analytics, to see which pages and products are viewed and improve the shop. No screen recordings.
• Only if you accept marketing cookies: Meta (Facebook, Instagram) and TikTok, to measure our ads. When you order, we also tell Meta about the purchase from our server, with your email, phone, name and town scrambled (hashed) so they can't be read, to match it with our ads.

Some of these providers store data outside Kenya (for example, our servers are in the European Union, and PostHog's in the United States). Where we transfer data abroad, we rely on providers with appropriate safeguards, as the Act requires.

How long we keep it

We keep order records for as long as the law requires for tax and accounting (generally at least 5 years), and other personal data only as long as needed for the purposes above.

Your rights

You have the right to:

• be informed of how your data is used, and access the data we hold about you;
• have inaccurate data corrected, and have data deleted where we no longer need to keep it;
• object to or restrict processing, and withdraw any consent you gave;
• receive your data in a portable format.

To use these rights, contact us. If you're not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Cookies

We use one cookie, which remembers your shopping bag for 30 days. Your browser's storage also keeps your login (if you have an account) and, if you're not logged in, the products you saved to your wishlist. All of these are needed for the store to work. Analytics and marketing cookies are only used if you accept them in the cookie banner; you can change your choice at any time with "Cookie settings" at the bottom of every page.

Changes

We may update this policy. The date at the top shows the latest version.