Privacy Policy

1. Introduction

Pureez ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, mobile application, or engage with our services (collectively, the "Platform").

This policy is drafted in compliance with the Kenya Data Protection Act, 2019 (KDPA) and the associated Data Protection (General) Regulations, 2021. By using our Platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information You Provide

When you register, make a purchase, or interact with our Platform, we may collect:

Identity Data: Full name, username, date of birth.
Contact Data: Email address, phone number, delivery address.
Account Data: Login credentials (passwords stored securely via hashing).
Transaction Data: Purchase history, order details, and payment preferences.
Communication Data: Messages sent via WhatsApp or our platform's messaging features.
Seller Data: Information provided during the seller registration process (name, email, phone, item descriptions).

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

Device Information: IP address, browser type, operating system, device identifiers.
Usage Data: Pages viewed, time spent on pages, navigation paths, search queries.
Location Data: Approximate location derived from your IP address.
Cookies & Similar Technologies: See Section 7 below.

3. Legal Basis for Processing

Under the Kenya Data Protection Act, 2019, we process your personal data on the following lawful grounds:

Consent: You have given explicit consent for a specific purpose.
Contractual Necessity: Processing is necessary to fulfill our obligations to you.
Legitimate Interest: Processing is necessary for our legitimate business interests.
Legal Obligation: Processing is required to comply with Kenyan laws.

4. How We Use Your Information

We use the information we collect to:

Create and manage your account.
Process and fulfill your orders.
Facilitate WhatsApp-based communication with our sales agents.
Personalize your shopping experience.
Send transactional notifications (order confirmations, shipping updates).
Improve Platform functionality and performance.
Detect, prevent, and address fraud or illegal activities.
Comply with legal obligations.

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

Service Providers: Hosting, analytics, payment processing, and delivery logistics partners.
Sellers: Delivery information shared to fulfill orders.
Legal Authorities: When required by law or to protect rights and safety.
Business Transfers: In connection with mergers, acquisitions, or asset sales.

6. Data Security

We implement appropriate technical and organizational measures including:

Encryption of data in transit (TLS/SSL) and at rest.
Secure authentication using HttpOnly cookies.
Regular security audits and vulnerability assessments.
Access controls limiting data access to authorized personnel only.

7. Cookies & Tracking

We use cookies for:

Essential Cookies: Authentication and session management.
Analytics Cookies: Understanding user interactions (e.g., Google Analytics).
Preference Cookies: Storing your theme and language preferences.

You can manage cookies through our cookie consent banner or your browser settings.

8. Your Rights Under the KDPA

You have the right to:

Access: Request a copy of your personal data.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your data.
Objection: Object to processing for certain purposes.
Data Portability: Receive your data in a structured format.
Withdraw Consent: Withdraw consent at any time.

9. Data Retention

Account Data: Retained during account lifetime + 12 months after deletion.
Transaction Data: Retained for 7 years (tax/legal compliance).
Communication Logs: Retained for 6 months.

10. Children's Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect data from children.

11. Contact & Complaints

For privacy inquiries or data requests:

WhatsApp: +254 746 360 788
Email: privacy@pureez.co.ke

To lodge a complaint with Kenya's data regulator:

Office of the Data Protection Commissioner (ODPC)
Website: www.odpc.go.ke
Email: complaints@odpc.go.ke

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or a prominent notice on the Platform.