Privacy Policy

Last updated: January 2026

This policy explains what personal information Kinanel Lifestyle collects when you use kinanel.com, how we use it, and the rights you have over it. We follow Kenya's Data Protection Act, 2019, which is enforced by the Office of the Data Protection Commissioner (ODPC).

Who we are

Kinanel Lifestyle is a sole proprietorship registered in Kenya, trading online at kinanel.com. Our physical premises are at Victoria Court, 1st Floor, Shop 4, Luthuli Avenue, Nairobi. You can reach us at enquiries@kinanel.com, on 0733 930 760, or on WhatsApp at 0471 610 842.

For any question about your data or this policy, email enquiries@kinanel.com with "Data privacy" in the subject line. We are the data controller for the personal information described below.

What we collect

When you place an order: your name, delivery address, phone number, email address, and the items you buy. Your payment card and M-Pesa details are entered directly with Paystack, our payment processor. We never see or store your full card number or M-Pesa PIN.

When you contact us: your name, email, phone number, and whatever you write in the message.

When you browse the site: basic technical information your browser sends automatically (IP address, device type, pages visited, referral link). This is standard for any website and lets us keep the site secure and working properly.

When you sign up for updates (if applicable): your email address and marketing consent.

We do not knowingly collect information from anyone under 16. If you are under 16, please do not place an order or send us personal information.

Why we collect it

• To fulfil your order: we can't ship a product without a delivery address and phone number, and we can't send a receipt without your email.
• To provide customer support: if you contact us with a question or complaint.
• To keep the site running: technical logs help us find bugs, block abuse, and maintain security.
• To meet legal obligations: we keep basic transaction records for tax and consumer-protection purposes as Kenyan law requires.
• To send you updates: only if you have specifically asked us to.

We do not use your personal information for automated decision-making, profiling, or targeted advertising.

Who we share it with

Running an online shop needs a few third-party services. Each one only receives what they need to do their job:

• Paystack (our payment processor): the transaction amount and reference. Paystack handles your actual payment details directly and is regulated by the Central Bank of Kenya.
• The courier who delivers your order: your name, delivery address, and phone number, so they can find you.
• Resend (our email service): your email address, so we can send you order confirmations and dispatch notices.
• Cloudflare (our website infrastructure): basic technical information to serve the site securely.

We do not sell your personal information to anyone. We do not share it with advertisers or data brokers. We share it with government authorities only when legally compelled to.

Where your information is stored

Your personal information is stored on servers operated by Railway and Cloudflare. Some of these servers are located outside Kenya. When personal information leaves Kenya, we rely on the safeguards permitted under Section 48 of the Data Protection Act — mainly the contractual protections these providers publish. If you would like more detail on where exactly your data sits, email us and we'll explain.

How long we keep it

• Order records: at least seven years, because Kenyan tax law requires it.
• Customer support emails: two years, then we delete them.
• Website technical logs: 90 days.
• Marketing signups: until you unsubscribe. Every marketing email includes an unsubscribe link.

Your rights under the Data Protection Act

You have the right to:

• Know what personal information we hold about you.
• Access it, on request.
• Correct anything that's wrong or out of date.
• Delete it, subject to our legal obligation to keep transaction records.
• Restrict how we use it, if you disagree with something.
• Object to any use of it you find unreasonable.
• Withdraw consent at any time, where we relied on your consent (like marketing signups).
• Complain to the Office of the Data Protection Commissioner if you think we've mishandled your data. Their contact details are at odpc.go.ke.

To exercise any of these rights, email enquiries@kinanel.com. We respond within 30 days.

Cookies and similar technologies

Our website uses a small number of cookies. None of them are for advertising. They exist so the site can:

• Remember what's in your shopping cart between page loads.
• Keep you logged in during a checkout session.
• Protect the site from abuse (rate limiting, bot detection — handled by Cloudflare).

We do not use tracking pixels, advertising cookies, or third-party analytics that follow you around the internet. Your browser lets you block or delete cookies at any time, though doing so may make the checkout stop working properly.

Security

We use HTTPS across the entire site. Payment details are handled by Paystack and never touch our servers. Access to our systems is limited to the business owner. If we ever suffered a breach that could put your data at risk, we would notify you and the ODPC within 72 hours as the Data Protection Act requires.

Changes to this policy

If we update this policy, we'll change the "last updated" date at the top and, for significant changes, notify you by email if you're on our list. Continued use of the site after an update means you accept the new version.

Contact

Kinanel Lifestyle
Victoria Court, 1st Floor, Shop 4, Luthuli Avenue, Nairobi
enquiries@kinanel.com
0733 930 760 · WhatsApp 0471 610 842