Privacy Policy

Information you give us

• Name, email address, phone number, and delivery address — when you place an order or subscribe to our mailing list
• Payment information — card details are processed securely by our payment partner; we do not store them
• Messages and enquiries you send us via email or our contact form

Information collected automatically

• Pages visited, time spent on site, referral source, and browser or device type
• Cookie and session data — see our Cookie Policy for full details

We process your personal data on the following legal bases under the Kenya Data Protection Act, 2019:

Contract performance

To process and fulfill your orders, confirm dispatch, and communicate order updates.

Consent

To send you marketing emails, recipes, hosting tips, and exclusive offers — only where you have opted in. You may withdraw consent at any time by clicking unsubscribe in any email or contacting us directly.

Legitimate interests

To improve our website and product experience, understand how visitors use our site, and protect against fraud.

Legal obligation

To comply with our obligations under Kenyan law, including Kenya Revenue Authority (KRA) record-keeping requirements.

We do not sell your personal data. We share it only where necessary to operate our business:

• Delivery and logistics partners — to fulfill and track your order within Kenya
• Payment processors — to handle payment securely
• Email marketing platforms — only where you have consented to receive marketing
• Professional advisors such as accountants and legal counsel — where legally required

All third parties are required to handle your data consistently with the Kenya Data Protection Act, 2019.

We currently deliver within Kenya only. Your personal data is processed and stored within Kenya. We do not transfer your personal data to countries outside Kenya.

• Order records: 7 years from purchase date — required for KRA tax compliance
• Marketing consent and email communications: until you withdraw consent
• Website analytics: rolling 26 months
• Contact enquiries: 2 years from last contact

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you
• Have inaccurate or incomplete data corrected
• Request deletion of your data where no legal obligation requires us to retain it
• Object to processing where we rely on our legitimate interests
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time — this does not affect the lawfulness of any processing carried out before withdrawal

To exercise any of these rights, email us at [email protected]. We will respond within 21 days.

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure. No method of transmission over the internet is entirely secure, but we work to protect your data at every step.

If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya — the supervisory authority for data protection matters.

We use cookies and similar technologies on our website. For full details of what we use and how to manage them, please read our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date shown at the top of this page reflects the most recent version. We encourage you to review this page periodically.

For any privacy-related questions or requests, please contact us at: