Privacy Policy
Your Privacy Matters to Us
We are committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019.
Last Updated: November 03, 2026
1. Introduction & Data Controller
Welcome to weshop. This Privacy Policy explains how weshop ("we", "us", or "our") collects, uses, discloses, and safeguards your personal data when you visit our website or make a purchase. For the purposes of the Kenya Data Protection Act, 2019 (the "Act"), weshop is the Data Controller.
2. Personal Data We Collect
We collect several types of information from and about users of our Site, including:
- Identity Data: First name, last name, username, and title.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Payment method details (e.g., M-Pesa phone number). Note: We do not store your M-Pesa PIN or full credit/debit card details; these are processed securely by our third-party payment gateways.
- Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting, and location data.
3. How We Collect Your Data
We collect data through direct interactions (when you create an account, place an order, or contact support), automated technologies (cookies and server logs as you navigate the Site), and occasionally from third parties (such as delivery couriers or fraud prevention agencies).
4. Legal Basis for Processing
Under the Kenya Data Protection Act, we rely on the following legal bases to process your data:
- Contractual Necessity: To fulfill the contract when you purchase a product (e.g., processing payment, delivering goods).
- Consent: When you sign up for our newsletter or opt-in to marketing communications.
- Legitimate Interests: To improve our services, prevent fraud, and ensure the security of our platform.
- Legal Obligation: To comply with Kenyan tax and anti-fraud laws.
5. How We Share Your Data
We may share your personal data with:
- Sellers: To fulfill your order, we share necessary shipping details (name, address, phone number) with the third-party sellers on our marketplace.
- Service Providers: Third-party couriers, payment processors (e.g., M-Pesa/Safaricom), and IT support teams who require access to perform services on our behalf.
- Legal Authorities: If required by law, court order, or to protect the rights and safety of weshop, our users, or the public.
6. Data Security & Retention
We have implemented robust security measures, including SSL encryption, to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
7. Your Legal Rights
Under the Data Protection Act, 2019, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of any incomplete or inaccurate data.
- Erasure (Right to be Forgotten): Request deletion of your personal data where there is no good reason for us continuing to process it.
- Objection & Restriction: Object to or request restriction of processing of your personal data.
- Data Portability: Request the transfer of your personal data to you or a third party.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Site and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.
9. Changes to This Privacy Policy
We may update this policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
10. How to Complain
You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya if you are unhappy with how we have handled your data. However, we would appreciate the chance to deal with your concerns before you approach the ODPC, so please contact us in the first instance.
Have Privacy Questions?
Our Data Protection Officer is here to help. Reach out to us anytime.