Privacy Policy

Snackoh Bakers ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place orders, or interact with our services. This policy is prepared in accordance with the Kenya Data Protection Act, 2019 and the guidelines issued by the Office of the Data Protection Commissioner (ODPC).

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please refrain from using our services.

1. Information We Collect

1.1 Personal Data

When you place an order, create an account, subscribe to our newsletter, or contact us, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Delivery address
• Payment information (M-Pesa phone number, card details processed via secure third-party payment gateways)
• Order history and preferences

1.2 Usage Data

We automatically collect certain information when you visit our website, including:

• IP address and approximate geographic location
• Browser type, version, and language
• Device type and operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or source

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyse site traffic. For more details, see Section 6 below.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing orders: To process, fulfil, and deliver your orders, including sending order confirmations and delivery updates.
• Customer service: To respond to your enquiries, feedback, complaints, and support requests.
• Communication: To send you marketing communications, newsletters, promotions, and updates about new products (only with your consent, which you may withdraw at any time).
• Improvement: To analyse usage patterns and improve our website, products, and services.
• Security: To detect and prevent fraud, unauthorised access, and other security threats.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

• Service providers: With trusted third-party service providers who assist us in operating our website, processing payments (e.g., M-Pesa, card payment processors), and delivering orders. These providers are contractually obligated to protect your data.
• Delivery partners: With our delivery personnel and logistics partners, limited to the information necessary to complete your delivery (name, phone number, and delivery address).
• Legal obligations: When required by law, court order, or government authority, or to protect our rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Order records may be retained for up to seven (7) years for tax and accounting purposes. You may request deletion of your personal data at any time, subject to legal retention requirements.

6. Cookies and Tracking Technologies

Our website uses cookies to:

• Essential cookies: Ensure the website functions correctly (e.g., shopping cart, user sessions).
• Analytics cookies: Help us understand how visitors use our website so we can improve it.
• Preference cookies: Remember your settings and preferences for a better experience.
• Marketing cookies: Deliver relevant advertisements and measure their effectiveness.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

7. Your Rights Under the Kenya Data Protection Act 2019

Under the Data Protection Act, 2019 of Kenya, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your data in a commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided in Section 10 below.

8. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will take steps to remove such information from our systems.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website and services after any changes constitutes your acceptance of the updated policy.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

11. Office of the Data Protection Commissioner (ODPC)

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya: