Privacy Policy

Last updated: [1 October 2026]

This Privacy Policy explains how Kwinty Mall ("Kwinty Mall", "we", "us", "our") collects, uses, shares and protects your personal data when you use our website, mobile app and services (together, the "Platform"). We are committed to handling your data lawfully and transparently in line with the Data Protection Act, 2019 of Kenya and its Regulations.

By using the Platform, you agree to this Policy. If you do not agree, please do not use the Platform.

1. Who we are

Kwinty Mall is an online marketplace operated by [Registered company / trading name], based in Nairobi, Kenya. For the purposes of the Data Protection Act, 2019, we act as the data controller of the personal data described in this Policy.

Contact for data matters: [privacy@kwintymall.com].

2. The information we collect

We collect the following categories of personal data:

Account details — your name, email address, phone number, password and account role (buyer, seller, rider, delivery partner, etc.).
Transaction details — orders you place or fulfil, delivery addresses, amounts, and your M-Pesa payment and payout phone number.
Seller and partner details — business information, and identity/verification documents you upload (for example ID, driving licence or certificates required to sell or deliver).
Communications — messages, reviews, enquiries and support requests.
Technical data — device type, browser, IP address and general usage information collected automatically as you browse.

3. How we collect it

We collect data directly from you when you register, place or fulfil an order, upload documents, contact us, or use the Platform. Some technical data is collected automatically through cookies and similar technologies (see section 8).

4. How we use your data

We use your personal data to:

create and manage your account;
process orders, payments and withdrawals, and arrange delivery;
verify the identity of sellers, riders and delivery partners;
protect against fraud and keep the Platform and payments secure;
respond to your enquiries and provide customer support;
send you service messages and, where you have agreed, marketing;
improve our services; and
comply with our legal obligations.

We rely on lawful bases including performing our contract with you, your consent, our legitimate business interests, and compliance with the law.

5. Payments (M-Pesa)

Payments and payouts on Kwinty Mall are processed through Safaricom's M-Pesa (Daraja) services. When you pay or receive money, the phone number and amount are shared with Safaricom to complete the transaction. We do not store your M-Pesa PIN, and we never ask for it. Payments are handled over secure channels.

6. When your money is held (escrow)

To protect buyers, payment for an order may be held and only released to the seller once the order is delivered and confirmed. This means limited order and delivery information is shared between the buyer, the seller and the assigned rider so the order can be completed.

7. How we share your data

We share personal data only as needed to run the Platform:

Sellers and buyers — to fulfil an order, a buyer's delivery details are shared with the relevant seller, and a seller's store details are shown to buyers.
Riders and delivery partners — delivery name, address and contact are shared with the assigned rider or partner to deliver your order.
Service providers — such as Safaricom (M-Pesa), our hosting provider and email/SMS providers, who process data on our behalf.
Legal authorities — where we are required to by law, or to protect our rights and the safety of users.

We do not sell your personal data.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember your cart, and understand how the Platform is used so we can improve it. You can control cookies through your browser settings, though some features may not work properly without them.

9. How long we keep your data

We keep your personal data for as long as your account is active and as needed to provide our services. We may keep certain records for longer where required for legal, tax, accounting or fraud-prevention purposes, after which the data is deleted or anonymised.

10. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and secure handling of payment credentials. No system is completely secure, but we work continuously to safeguard your information.

11. Your rights

Under the Data Protection Act, 2019, you have the right to:

be informed about how your data is used;
access the personal data we hold about you;
ask us to correct inaccurate or incomplete data;
ask us to delete your data, where the law allows;
object to or restrict certain processing; and
withdraw consent to marketing at any time.

To exercise any of these rights, contact us at [privacy@kwintymall.com]. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

12. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will remove it.

13. Third-party links

The Platform may link to other websites. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.

14. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top shows when it was last changed. Significant changes will be communicated through the Platform.

15. Contact us

If you have any questions about this Policy or how we handle your data, contact us:

Email: [privacy@kwintymall.com]
Phone: [+254 7XX XXX XXX]
Address: [Business address, Nairobi, Kenya]
Web: kwintymall.com