Sourced.

Draft for legal review before launch

Privacy policy

What we collect, why, who sees it, and your rights under the Kenya Data Protection Act, 2019.

Last updated 1 November 2026.

1. What we collect

  • Contact details: name, email, phone and preferred channel, so we can quote and update you.
  • Your request: what you want, links, photos you upload, budget, delivery town, and the full delivery address once you approve a quote.
  • Payments: the M-Pesa or bank references you report and our confirmation of them. We never store card numbers.
  • Order records: receipts, item photos, shipment documents and proof of delivery produced while fulfilling your order.
  • Usage: standard server logs and the device information your browser sends.

2. Why we use it

To check feasibility, prepare and send quotes, take and confirm payment, buy, ship, clear and deliver your order, keep you informed, handle claims and returns, meet customs and tax obligations, and improve the service. We may use AI tools to help read requests, compare sellers and draft updates; a person reviews every decision that affects your order.

3. Who sees it

  • Our team in Nairobi, under role-based access with two-factor authentication.
  • Travellers who buy and carry your item see your first name, delivery town and the item details. Your full delivery address and phone number are shown only to the traveller delivering to you, and only while that delivery is under way. Travellers never see your email, budget or quote totals.
  • Insurers and, where a declaration requires it, customs authorities receive what carriage and declaration require: consignee name, item description and value.
  • Sellers receive only what a purchase requires; the traveller buys in store or to their own address, never yours.
  • Service providers that host our systems or send messages process data on our instructions.

We do not sell your information.

4. Retention

Request and order records, including receipts and customs documents, are kept for seven years to meet tax and import record requirements. Contact details are kept while you remain a customer and for two years after your last order unless you ask us to delete them sooner. Uploaded photos that are no longer needed for an order are deleted within 12 months of delivery.

5. Your rights

Under the Data Protection Act, 2019 you may ask to access, correct, delete or restrict the use of your personal data, object to processing, and receive a copy in a portable form. Write to us at the address below and we will respond within 30 days. You may also complain to the Office of the Data Protection Commissioner.

6. Security and transfers

Data is stored on servers protected by access controls and encryption in transit. Because the item is bought overseas, the traveller sees the item details in the seller’s country. We share the minimum needed for each step.

7. Contact

Questions about this policy or your data: use the contact details on our invoices or message us from your request page.