Privacy Policy
This Privacy Policy explains how Buy More Mall Kenya collects and uses personal data when you use www.buymoremall.co.ke, contact us, buy products, book services, or sell on our marketplace. We process personal data in line with the Data Protection Act, 2019 and its regulations.
Who is responsible for your data
Buy More Mall Kenya is the data controller for personal data processed through the website. Contact us about privacy at info@buymoremall.co.ke, or write to us at Eastern Bypass, near Naivas Supermarket, Kamakis, Ruiru, Kiambu County, Kenya.
When you buy from a Seller, the Seller also receives the details needed to fulfil your order (such as your name, phone number and delivery address) and is responsible for using them lawfully, only for that order.
The data we collect
Data you give us
- Account and contact details: name, phone number, email, password (stored encrypted), delivery addresses.
- Order details: products, quantities, delivery location and instructions, and messages to Sellers.
- Payment details: your M-Pesa phone number and M-Pesa transaction reference. Card details are entered on the payment provider's secure page (Stripe or Flutterwave). We do not store your full card number or PIN.
- Find it for me and service requests: what you are looking for, budget, location and any photo you upload.
- Photos for picture search: images you upload to search by photo.
- Seller and service provider details: business name, owner details, ID or registration documents, KRA PIN, licences, bank or M-Pesa payout details.
- Reviews, questions and messages you post or send us, including on WhatsApp and email.
Data collected automatically
- Device and browser information, IP address, pages viewed, searches and referring pages, collected through server logs and cookies.
- Cookies that keep you signed in, remember your cart and preferences, and help us measure how the website is used. You can accept or decline non-essential cookies in the cookie notice and in your browser settings.
How we use your data and our lawful basis
| Purpose | Lawful basis (Data Protection Act, 2019) |
|---|---|
| Creating and managing your account, processing orders and payments, arranging delivery, returns and refunds | Performance of a contract with you |
| Sending order, payment and delivery updates by SMS, email or WhatsApp | Performance of a contract |
| Customer support and resolving complaints and disputes | Contract and our legitimate interests |
| Preventing fraud, securing accounts and the website, and verifying Sellers | Legitimate interests and legal obligation |
| Keeping tax and accounting records, and responding to lawful requests from authorities | Legal obligation |
| Improving search, recommendations and the website | Legitimate interests |
| Marketing emails, SMS or WhatsApp messages about offers | Your consent. You can opt out at any time. |
| Analysing photos you upload for picture search, and handling Find it for me requests | Your consent (by uploading) and performance of the service you request |
Who we share data with
- Sellers and service providers you buy from or book, to fulfil your order.
- Delivery riders and couriers: name, phone number and delivery address.
- Payment providers: Safaricom (M-Pesa), Stripe and Flutterwave, to process payments.
- Technology providers acting on our instructions: website hosting, email delivery, and an artificial-intelligence provider (Anthropic) that analyses photos uploaded to picture search to identify the product.
- Authorities such as the Kenya Revenue Authority, the police or courts, where the law requires it.
- A buyer or successor of our business, if the business is sold or restructured, under the same privacy protections.
We do not sell your personal data.
Transfers outside Kenya
Some of our service providers (for example our web hosting, card payment processors and the picture-search AI provider) store or process data outside Kenya, including in the United States and the European Union. We only transfer data where the provider gives appropriate safeguards for the protection of personal data, as required by the Data Protection Act, 2019, and we share only what is needed for the service.
How long we keep data
- Account data: while your account is open, and up to 2 years after it is closed, unless you ask us to delete it earlier.
- Order, payment and tax records: 7 years, as required for tax and accounting purposes.
- Photos uploaded to picture search: deleted within 24 hours, unless you attach the photo to a Find it for me request, in which case it is kept with that request.
- Find it for me requests and support messages: up to 2 years.
- Seller verification documents: while the shop is active and up to 7 years after it closes.
- Unused guest accounts created for a failed payment are deleted automatically.
Your rights
Under the Data Protection Act, 2019 you have the right to:
- be informed about how your data is used
- access the personal data we hold about you
- ask us to correct inaccurate or incomplete data
- ask us to delete data that we no longer need or that was processed unlawfully
- object to processing, including direct marketing
- restrict processing in certain cases
- receive your data in a portable format, where applicable
- withdraw consent at any time, without affecting earlier processing
To use these rights, email info@buymoremall.co.ke from the email or phone number on your account. We may need to verify your identity. We will respond within the time set by law. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner.
How we protect your data
We use encrypted connections (HTTPS), encrypted password storage, restricted staff access, and regular backups and security checks. No system is completely secure, so please use a strong password, keep your PIN private and tell us immediately if you notice suspicious activity. If a breach of personal data is likely to put you at risk, we will notify you and the Data Protection Commissioner as the law requires.
Children
The website is intended for people aged 18 and over. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has given us personal data, contact info@buymoremall.co.ke and we will delete it.
Marketing messages
We send marketing messages only where you have agreed. You can opt out at any time by using the unsubscribe link in an email, replying STOP to a message, or contacting info@buymoremall.co.ke. You will still receive messages about your orders and account.
Changes to this policy
We may update this policy when our services or the law change. The latest version is always on this page, with the date it was last updated. Where changes are significant, we will tell you by email or a notice on the website.
Related policies
Contact us
Buy More Mall Kenya
Eastern Bypass, near Naivas Supermarket, Kamakis, Ruiru, Kiambu County, Kenya
Email: info@buymoremall.co.ke
Phone / WhatsApp: +254 717 263 774
buymoremall
Kenya's Online Marketplace
Buy More Mall Kenya gives you a direct link to manufacturers, suppliers and service providers. Sellers are verified, there are no shortcuts, and customised orders come at affordable rates.
- Buy direct from manufacturers & suppliers
- Verified sellers and service providers
- Pay securely with M-Pesa
Shop
Sell & Earn
Help
Contact Us
- 0717 263 774
- Chat on WhatsApp
- buymoremallkenya@gmail.com
- Eastern bypass Ruiru Near Naivas super market @ kamakis & Nanyuki Neema Academy
- Contact page
