Privacy policy

1. Who we are

Callbeba Kenya operates an online marketplace connecting customers with local vendors for everyday essentials. For privacy questions contact hello@callbeba.co.ke or 254758281995. Guidance for data subjects in Kenya is also available from the Office of the Data Protection Commissioner.

2. Personal data we collect

• Account data — name, email, phone, password (stored as a secure hash), default delivery estate/building/notes.
• Order data — delivery location, instructions, items ordered, payment preference, order status.
• Vendor data — shop details, contacts, GPS pin, catalogue, subscription and payment references.
• Location — approximate or precise location when you enable GPS to find nearby shops; vendor shop coordinates when set in vendor settings.
• Technical data — IP address, browser/device type, pages visited, cookies/session identifiers, approximate place names derived for security and service improvement.
• Messages — enquiries and complaint reports you send us.

3. Why we collect it

• To create accounts, process orders and enable delivery between you and vendors.
• To show relevant nearby vendors and products when location is enabled.
• To operate vendor subscriptions, support, and platform security.
• To meet legal, accounting and dispute-resolution needs under Kenyan law, including the Data Protection Act, 2019.

4. Who receives your data

• Vendors fulfil orders and receive the customer and delivery details needed for that order.
• Service providers (hosting, email, analytics, messaging) process data on our instructions.
• Authorities when required by law or to protect rights and safety.
• We do not sell personal data.

5. How long we keep data

We retain personal data only as long as needed for the purposes above including active accounts, order history for support and accounting, and legal retention periods. When data is no longer required we delete or anonymise it where practicable. You may request deletion of account data subject to legal holds (for example open disputes or tax records).

6. Your rights (Kenya Data Protection Act)

Depending on the Act and the facts of your case, you may have rights to be informed, access your data, request correction, request deletion, object to or restrict certain processing, and lodge a complaint with the Office of the Data Protection Commissioner.

To exercise rights, email hello@callbeba.co.ke with enough detail for us to verify and respond. We may need to confirm your identity before acting on a request.

7. Cookies, PWA and security

We use cookies and similar storage for login, cart and preferences. The progressive web app may cache assets on your device. We apply reasonable technical and organisational measures (see our Website security page). No online service is perfectly secure.