Privacy & Data Protection Policy

Introduction

STEWAMPLUS Commerce Hub respects the privacy of customers, visitors, suppliers, service providers, and other users. We process personal information in accordance with applicable Kenyan data-protection requirements and other applicable laws.

Information we may collect

• Account details such as name, email, phone number, and login information.
• Delivery details such as county, town or area, address, landmark, and voluntarily supplied location.
• Service details including the request, location, preferred date and time, photographs or files, and related communication.
• Transaction details including orders, products, payment status, references, refunds, and fulfilment information.
• Technical details such as IP address, device, browser, operating system, app activity, error logs, and security logs.

Why we use information

• Create and manage accounts, orders, payments, bookings, deliveries, and service coordination.
• Provide support, tracking, refunds, complaints handling, and necessary transactional notices.
• Prevent fraud and abuse, improve performance, maintain security, and meet legal obligations.
• Provide requested marketing communications where applicable and appropriately authorised.

Data minimisation

We aim to collect only information reasonably necessary for the purpose for which it is requested, rather than collecting information simply because it is technically possible.

Sharing and international processing

Necessary information may be shared with authorised payment providers, suppliers, couriers, technicians, infrastructure, communication, security, fraud-prevention, and other service providers involved in fulfilling a request.

Some providers may process information outside Kenya. Applicable safeguards should be used where personal information crosses borders.

Security

• Secure authentication and access controls.
• Database access rules, encryption in transit, audit logs, payment verification, and role-based administration.
• Security monitoring and appropriate backup and recovery procedures.
• Sensitive credentials are not exposed through customer-facing code, and we do not request or store a customer’s M-Pesa PIN.

Your data rights

Subject to applicable law and relevant limitations, you may have rights to be informed, access your information, request correction, object to certain processing, request deletion or restriction where applicable, and exercise other rights under Kenya’s data-protection framework.

Marketing, cookies, and similar technologies

Where marketing requires consent, we should obtain and record it and provide an appropriate opt-out. Necessary transaction, booking, security, and account messages may still be sent.

Cookies or similar technologies may support authentication, security, preferences, cart functionality, analytics, performance, and personalisation where applicable. Consent will be requested where legally required.

Retention, children, and incidents

Information is retained only as reasonably necessary for service delivery, legitimate business purposes, disputes, security, accounting, or legal obligations.

The platform is not designed to knowingly collect unnecessary information from children. A parent or guardian should provide information and consent where required.

We maintain an incident-response process and will take legally required notification steps for applicable personal-data breaches.

Privacy contact

For privacy questions or requests, email stewampluscomercehub@gmail.com. Identity verification may be required before a request is completed.