Privacy Policy

Information you give us

• Name, phone number, and delivery details — when you send us an order
• Email address — when you subscribe to our mailing list or write to us
• Messages and enquiries you send us via email or our contact form

We do not collect card or payment details. Orders are completed over WhatsApp and paid on delivery, so no payment information is entered on this website.

Information collected automatically

• Pages visited, time spent on site, referral source, and browser or device type
• Analytics cookies set on arrival — see our Cookie Policy for full details
• Contact details typed into forms on this site, which Google Analytics is configured to detect and send to Google in hashed form — see our Cookie Policy

We process your personal data on the following legal bases under the Kenya Data Protection Act, 2019:

Contract performance

To process and fulfill your orders, confirm dispatch, and communicate order updates.

Consent

To send you occasional emails with recipes, hosting tips, and news — only where you have given us your address through the sign-up form on this site. We send these from our own inbox rather than through a bulk mailing tool, so there is no unsubscribe link in the message. To be taken off the list, reply to any email or write to us and we will remove you.

Legitimate interests

To improve our website and product experience, understand how visitors use our site, and protect against fraud.

Legal obligation

To comply with our obligations under Kenyan law, including Kenya Revenue Authority (KRA) record-keeping requirements.

We do not sell your personal data. We share it only where necessary to operate our business:

• Delivery and logistics partners — to fulfill and track your order within Kenya
• WhatsApp (Meta) — orders are placed and confirmed through a WhatsApp conversation
• Resend — delivers contact form and mailing list sign-ups to our inbox
• Google Analytics — website usage data, including contact details its automatic collection detects on our forms
• Cloudflare — hosts and serves this website
• Professional advisors such as accountants and legal counsel — where legally required

All third parties are required to handle your data consistently with the Kenya Data Protection Act, 2019.

We currently deliver within Kenya only, and our own records of your order are kept in Kenya.

Several of the services this website depends on are operated from outside Kenya, so data handled by them is processed abroad. This includes Google Analytics and WhatsApp, and the Resend and Cloudflare services that deliver our forms and serve this site. Where your data is processed outside Kenya, we rely on the data protection commitments those providers make to their customers.

• Order records: 7 years from purchase date — required for KRA tax compliance
• Mailing list address and email history: until you ask us to remove you
• Website analytics: retained by Google Analytics for up to 14 months
• Contact enquiries: 2 years from last contact

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you
• Have inaccurate or incomplete data corrected
• Request deletion of your data where no legal obligation requires us to retain it
• Object to processing where we rely on our legitimate interests
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time — this does not affect the lawfulness of any processing carried out before withdrawal

To exercise any of these rights, email us at [email protected]. We will respond within 21 days.

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure. No method of transmission over the internet is entirely secure, but we work to protect your data at every step.

If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya — the supervisory authority for data protection matters.

We use cookies and similar technologies on our website. For full details of what we use and how to manage them, please read our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date shown at the top of this page reflects the most recent version. We encourage you to review this page periodically.

For any privacy-related questions or requests, please contact us at: