Privacy Policy

Your Privacy Matters

At SHOEZAZ, we are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under Kenyan data protection law, including the Data Protection Act, 2019.

Information We Collect

We collect information you provide directly when you create an account, place an order, or contact us:

• Full name, email address, and phone number.
• Delivery and billing address.
• Payment information (M-Pesa number or card details — card details are processed by our payment gateway and never stored on our servers).
• Order history and product preferences.

We also collect certain information automatically:

• Device type, browser, and IP address.
• Pages visited and time spent on site.
• Referring website or search terms.

How We Use Your Data

• To process and fulfill your orders.
• To communicate with you about your orders, promotions, and customer support.
• To improve our website, products, and customer experience.
• To comply with legal obligations under Kenyan law.

Data Sharing

We do not sell your personal data. We share data only with:

• Payment processors (M-Pesa / Safaricom, card payment gateway) for transaction processing.
• Delivery partners to fulfill your orders.
• Legal authorities when required by law or court order.

Data Security

We implement industry-standard security measures including SSL encryption, firewalls, and access controls. While no method of transmission is 100% secure, we take reasonable steps to protect your information in accordance with the Data Protection Act, 2019.

Cookies

We use essential cookies to operate our website and optional analytics cookies to understand site usage. You may disable non-essential cookies through your browser settings without affecting core functionality.

Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing of your data for marketing purposes.
• Lodge a complaint with the Office of the Data Protection Commissioner.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by Kenyan law. Order records are retained for a minimum of 7 years for tax and compliance purposes.

Contact the Data Controller

If you have any questions or wish to exercise your data rights, contact our Data Protection Officer at privacy@sole.co.ke or write to: SHOEZAZ Ltd, P.O. Box 00100, Nairobi, Kenya.