Umoja Marketplace � Customer information
Privacy Policy
Understand how your information supports your order, and the choices available to you.
Who this notice covers
This notice explains personal information used when you browse Umoja Marketplace, place an order or contact our team, including through WhatsApp. For questions about the business responsible for your information, contact info@umojamarketplace.co.ke.
Information we collect
Checkout asks for your name, phone number, email, delivery address, road or building, basket and optional delivery instructions. We also handle order history, payment references and status, enquiries and correspondence. Please avoid including sensitive personal information in delivery instructions. Public reviews may include the reviewer’s displayed name, photograph, rating and review text.
Why we use information
We use order and contact details to take steps you request, fulfil purchases, arrange delivery and provide support. Relevant records may be required for accounting and legal obligations. Security and abuse prevention support our legitimate interests in operating a reliable store, subject to your rights. Optional analytics and advertising are enabled through your privacy choice. An order is not blanket permission to send unrelated marketing.
Sharing and service providers
Information needed to operate the store is processed through services including MongoDB Atlas, Fly.io and our email service. Card payments use Paystack hosted checkout. Delivery partners and suppliers may receive information necessary for fulfilment or warranty support. WhatsApp communications are also handled by that service. Where you accept optional tracking, Google tools process browsing and advertising information. Providers have their own terms and privacy notices. Information may also be disclosed where legally required.
Payment information
Enter card details only on the payment provider’s checkout. Umoja uses payment references, amounts and verified status to reconcile orders. Never send card security codes, passwords, M-Pesa PINs or one-time codes to our staff. M-Pesa on delivery and online card payment are distinct payment methods; available options are shown at checkout.
Cookies and your choices
Essential cookies support sessions, your basket and checkout. The configured session and checkout cookie lifetimes are seven days; the cart cookie lifetime is 30 days. Other browser storage may support shopping preferences. Optional Google analytics and advertising scripts load only after you accept optional tracking. Use “Privacy choices” at the bottom of the page to accept or reject. Your choice is saved in this browser and changing it reloads the page. Rejecting prevents subsequent optional script loading; it does not undo information already sent. You can clear existing cookies through browser settings. Closing the notice without choosing does not enable tracking.
Processing outside Kenya
Some service providers may process information outside Kenya. International processing must use an applicable lawful transfer mechanism and appropriate safeguards. Contact us for information about the arrangements relevant to your information; this notice does not claim that all information stays in Kenya.
How long information is kept
Retention depends on the purpose: completing orders, support, accounting obligations and resolving disputes can require different periods. Cookie expiry does not delete order records. A deletion request may be limited by legal recordkeeping requirements or an active dispute. Contact us for information about the retention of a particular record.
Your rights and requests
You may request information about processing, access, correction, objection, and deletion or restriction where applicable. You may also request portability where the law provides it and withdraw consent for processing based on consent. Email us with “Privacy request” and describe the request. We may need proportionate verification before releasing or changing records. You do not need to send identity documents with your first enquiry. Rights can be subject to legal exceptions; you may complain directly to the ODPC.
Children’s information
The store is intended for customers able to enter a purchase agreement. A parent or guardian should supervise a child’s use and contact us if a child has supplied personal information requiring attention. Please do not submit information about children in order instructions unless needed for the service.
Security and notice changes
Access and session protections help safeguard information, but no website can guarantee absolute security. Contact us promptly about suspected misuse of your information. Material changes to this notice will be reflected on this page; significant changes may require additional notice or a renewed choice.
Need help?
For privacy requests, use the subject �Privacy request�. Tell us what you need; do not send card numbers, PINs or passwords.
info@umojamarketplace.co.keContact us � Privacy policy � Customer protection
You can also contact Kenya�s Office of the Data Protection Commissioner about a data protection concern.