Privacy Policy
Effective date: 27 October 2026
NEEMALK SUPERMARKET UMOJA ("we", "us", "our") operates the website at https://neemalk.co.ke/ and is committed to protecting your privacy. This policy explains what we collect, why, and your choices.
1. Information we collect
- Order details: name, phone number, delivery address, delivery location (coordinates), items ordered, and email address.
- Account information: when you create an account: your name, email, phone and a securely hashed password.
- Payment information: we use M-Pesa STK Push. We do not store your M-Pesa PIN. We store the transaction reference and receipt number Safaricom returns to confirm payment.
- Technical data: IP address, browser type, and pages visited, used for security, fraud prevention and improving the site.
2. How we use your information
- To process and deliver your orders and send order updates.
- To confirm payments with M-Pesa and prevent fraud.
- To provide customer support and respond to enquiries.
- To send service messages (order confirmations, payment receipts).
- To operate and secure the website.
We do not sell your personal data and will not use it for unrelated marketing without your consent.
3. Legal basis
We process your data to perform a contract with you (deliveries and orders), to comply with legal obligations (tax/records), and for our legitimate interests (security and improving our services).
4. Sharing
- Safaricom (M-Pesa): your phone number and order amount are shared to process payment.
- Couriers/delivery: your name, address and phone so your order can be delivered.
- Service providers: email delivery and hosting providers who process data on our behalf under contract.
- Authorities: only where the law requires.
5. Data retention
Order and transaction records are kept for as long as required for tax, accounting and warranty purposes (typically up to 7 years). Account data is kept while your account is active. You may request deletion of your account data that we are not legally required to keep.
6. Security
We use HTTPS, prepared-statement database queries, password hashing (bcrypt), session protection, CSRF protection, and server-side payment verification. No system is 100% secure, but we take reasonable, industry-standard measures to protect your data.
7. Your rights
Depending on your location, you may have the right to access, correct, delete, or restrict the use of your personal data, and to object to processing. To exercise any right, contact us at neemalksupermarket@gmail.com or call +254 786 600 327.
8. Cookies & local storage
We use essential cookies/local storage to keep you signed in and remember your shopping cart. We do not use third-party advertising cookies. You can clear these in your browser settings, but the cart and login may reset.
9. Children
Our services are not directed at children under 13, and we do not knowingly collect their data.
10. Changes
We may update this policy from time to time. The current version is always available on this page with its effective date.
11. Contact
NEEMALK SUPERMARKET UMOJA, Umoja One, Nairobi, Kenya.
Email: neemalksupermarket@gmail.com · Phone/WhatsApp: +254 786 600 327