Privacy Policy

We collect what we need to sell you something and get it to you — your name, how to reach you, where to deliver, and what you bought. We never see your full card number. We don't sell your data to anyone. You can ask us what we hold and ask us to delete it.

When you buy or enquire:

• Your name, phone number and email address
• Your delivery address, and delivery instructions you give us
• What you ordered, what you paid and when
• Your KRA PIN, but only if you ask for it on a VAT invoice
• For warranty and trade-in: the device, its serial number or IMEI, and its condition

When you use the website:

• Which pages you viewed, and which site or search engine sent you
• Approximate location — country, and usually city — worked out from your internet connection, not from GPS
• Your device type, browser and operating system
• What you type into the on-site assistant, so we can see what customers ask for

We do not collect your date of birth, your ID number, or anything about your health, politics or religion. We have no reason to.

We never see or store your full card number, expiry date or CVV. Card payments are handled by our payment provider, Paystack, on their own secure systems. We receive only a confirmation that payment succeeded and a reference for it.

M-Pesa payments are confirmed to us with the paying phone number and a transaction code. Your M-Pesa PIN is never entered on our website and nobody at iTey Store will ever ask you for it.

• To take your order, deliver it, and handle returns or warranty claims
• To send you a receipt, an invoice, or an update about your order
• To keep the tax and accounting records Kenyan law requires us to keep
• To see which products and pages customers are interested in, so we stock better
• To detect and prevent fraud and payment abuse

We send marketing messages only where you have asked for them, and every one has a way to stop them. Order updates are not marketing — you get those because you bought something.

Only the people needed to complete what you asked for:

• Our payment provider (Paystack), to take the payment and to process refunds and disputes.
• Delivery couriers, who get your name, address and phone number so they can reach you — nothing else.
• Our email provider, to deliver receipts and order updates to your inbox.
• Our hosting and database providers, who store the data on our behalf under contract and do not use it for their own purposes.
• Manufacturers or authorised service centres, where a warranty claim has to be sent to them.
• Kenyan authorities, where the law requires us to hand something over.

We do not sell your personal data, and we do not share it for anyone else's advertising.

• Order, invoice and warranty records — kept for as long as tax and accounting law requires, and for as long as a warranty could still be claimed.
• Website visit records — automatically deleted after 180 days.
• Enquiries and chat messages — kept while they are useful for serving you, then deleted.

Under the Data Protection Act, 2019, you have the right to:

• Ask what personal data we hold about you, and get a copy
• Have anything wrong corrected
• Ask us to delete it, where we are not legally required to keep it
• Object to us using it for marketing, and withdraw consent at any time
• Complain to the Office of the Data Protection Commissioner if you think we have handled it badly

To exercise any of these, email support@iteystore.co.ke or WhatsApp +254 727 415 589. We respond within 30 days. We may ask you to confirm who you are first — that protects you, not us.

We use browser storage to keep your shopping cart between visits, remember your preferences, and count visits so we can see which pages are useful. We do not run third-party advertising trackers.

You can clear or block this in your browser settings. The site still works — your cart just won't be remembered.

Data is stored on access-controlled systems, and administrative access is limited to staff who need it. No system is perfectly secure, but if a breach ever affected your data, we would tell you and the Office of the Data Protection Commissioner as the law requires.

Our website is meant for adults. We do not knowingly collect data from children under 18. If a child has given us their details, tell us and we will delete them.

If we change how we handle personal data, we will update this page and change the date at the top. Material changes will be announced on the site.