Privacy Policy

Raskey Trading Ltd, a company registered in Kenya, operating the Raskey Shop and the Raskey Foundation. Our registered address is Nairobi, Kenya. For privacy matters contact us at hello@raskey.co.ke.

When you place an order: name, email address, phone number, delivery address, order details, and payment reference numbers.

When you create an account: name, email address, and password (hashed — we never see your plain-text password).

Automatically: IP address, browser type, pages visited, and timestamps via server logs and analytics cookies (only if you consent).

When you contact us: the content of your messages.

• Process and fulfil your orders
• Send order confirmations and delivery updates by SMS and email
• Handle returns, disputes, and customer support
• Improve the shop and understand how customers use it (analytics, with consent)
• Send promotional emails and discount codes (only with your consent — you can unsubscribe any time)
• Comply with legal and tax obligations under Kenyan law

Contract performance: processing your order and delivering it to you.

Legitimate interests: fraud prevention, security, improving our services.

Consent: marketing emails and non-essential cookies. You can withdraw consent at any time.

Legal obligation: tax records and compliance with Kenyan law.

We do not sell your personal data. We share it only with:

• Payment providers (Safaricom M-Pesa, Paystack, PesaPal) — to process your payment
• SMS provider (Zettatel) — to send order and delivery notifications
• Email provider (Resend) — to send order confirmations
• Delivery volunteers — your name, phone, and delivery area only
• Supabase (database hosting, EU data centres) — stores all data
• Vercel (website hosting, global CDN) — serves the website

All third-party providers are contractually required to protect your data.

We use the following types of cookies:

• Essential: required for the cart, checkout, and login to work. Always active.
• Analytics: help us understand how customers use the shop (e.g. which pages are most popular). Only set with your consent.
• Marketing: used to show relevant promotions. Only set with your consent.

You can change your cookie preferences at any time using the cookie settings link in the footer.

We keep your order data for 7 years to comply with Kenyan tax law (Income Tax Act, VAT Act).

Account data is kept for as long as your account is active. You can request deletion at any time.

Marketing consent records are kept until you withdraw consent.

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for marketing or non-essential cookies at any time
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, email us at hello@raskey.co.ke. We will respond within 30 days.

We use HTTPS encryption for all data in transit. Passwords are hashed using bcrypt. Payment details are handled directly by our payment providers — we never store your card number or M-Pesa PIN.

The Raskey Shop is not directed at children under 18. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. Continued use of the shop after an update means you accept the revised policy.

Questions or requests: hello@raskey.co.ke
Raskey Trading Ltd, Nairobi, Kenya