Legal

    Privacy Policy

    Last Updated: April 2026 | Effective Date: April 2026

    1. Introduction

    Adede's Organic Fusions ("we," "us," "our," or "Adede") is a Kenyan skincare company committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (adede.tweeps.co.ke), make a purchase, or sign up for our community newsletter.

    We operate under Kenya's Data Protection Act 2019 (DPA) and are committed to registering with Kenya's Office of the Data Protection Commissioner (ODPC). Your trust is our most valuable asset, and we treat your data with the same care we use to craft our organic products.

    2. What Personal Data We Collect

    We collect personal data only when you choose to provide it. Here's exactly what we collect and why:

    When You Make a Purchase:

    • Full name
    • Email address
    • Phone number (for M-Pesa payment and order updates)
    • Shipping address
    • Payment information (processed securely through our payment provider)
    • Product preferences and purchase history

    When You Sign Up for Our Newsletter:

    • Email address
    • First name
    • Skincare interests or concerns (optional, to personalize content)

    When You Contact Us:

    Any information you provide in messages, emails, or chat inquiries

    Technical Data (Automatically Collected):

    • Browser type and IP address
    • Pages visited and time spent
    • Device type (mobile, tablet, desktop)
    • Referring website

    3. How We Use Your Personal Data

    We use your data only for these specific purposes:

    Order Fulfillment

    Processing your purchase, calculating shipping costs, processing payment, delivering your order, and sending order confirmation and tracking updates.

    Communication

    Responding to your customer service inquiries, sending order updates and delivery notifications, and (with your explicit consent) sending our community newsletter with skincare tips, ingredient spotlights, and special offers.

    Legal and Safety

    Complying with Kenyan law (Data Protection Act 2019, Consumer Protection Act 2012), investigating fraud or security issues, and protecting our legal rights.

    Product Improvement

    Understanding which products are most popular, improving our website and customer experience, and analyzing trends (anonymized data only).

    We do NOT:

    • Sell your data to third parties
    • Share your data with marketing companies
    • Use your data for purposes you haven't explicitly agreed to
    • Store your full payment card details (our payment provider handles this securely)

    4. Legal Basis for Processing Your Data

    Under Kenya's Data Protection Act 2019, we process your data based on:

    Contractual Necessity

    Your name, address, and M-Pesa number are necessary to complete your purchase.

    Your Explicit Consent

    Newsletter signups require your opt-in consent, which you can withdraw anytime.

    Legal Obligation

    We may process data to comply with Kenyan tax or consumer protection laws.

    Our Legitimate Interest

    Improving our website, preventing fraud, and responding to customer inquiries.

    5. Data Sharing and Third Parties

    We only share your data with:

    Payment Providers

    M-Pesa merchant partner, Stripe, or other card processors. They process payments securely and follow their own privacy policies.

    Shipping Partners

    We share your name and address with our logistics provider to deliver your order.

    Government Authorities

    Only if legally required by Kenyan law enforcement.

    We do NOT share your data with:

    • Advertising networks or data brokers
    • Affiliate marketers
    • Social media platforms (unless you explicitly connect your account)

    6. How Long We Keep Your Data

    Purchase Data: Kept for 7 years (required by Kenyan tax law)

    Newsletter Subscribers: Kept until you unsubscribe

    Inquiry Data: Kept for 1 year after your last message

    Technical/Browsing Data: Deleted after 90 days

    7. Your Data Rights Under Kenya's Data Protection Act 2019

    You have the following rights. To exercise any of these, email us at sales@adedesorganicfusions.com:

    Right to Access

    You can request a copy of all personal data we hold about you. We'll provide this within 30 days, free of charge.

    Right to Correction

    If your information is inaccurate or incomplete, you can ask us to correct it immediately.

    Right to Erasure ("Right to Be Forgotten")

    You can request that we delete your personal data. We will erase your information within 30 days, except data we're legally required to keep (tax records for 7 years) or data needed to complete pending orders.

    Right to Withdraw Consent

    You can unsubscribe from our newsletter anytime by clicking the "Unsubscribe" link in any email, or by emailing us.

    Right to Data Portability

    You can request your data in a portable format (e.g., CSV file) to transfer to another business.

    Right to Object

    You can object to us processing your data for marketing purposes. We will stop immediately.

    8. Data Security

    We take data security seriously:

    • Your payment data is encrypted using SSL/TLS technology
    • We do not store full credit card or M-Pesa PIN details
    • Our website uses HTTPS (secure connection)
    • Employee access to personal data is restricted and password-protected

    If a Data Breach Occurs:

    Under Kenya's Data Protection Act 2019, we must notify the ODPC within 72 hours of discovering a breach that poses a risk to your rights. If you are affected, we'll notify you directly as soon as possible.

    9. Cookies and Tracking

    Our website uses cookies to:

    • Remember items in your cart
    • Keep you logged in
    • Improve website performance
    • Understand user behavior (Google Analytics)

    You can disable cookies in your browser settings, but some site features may not work properly.

    10. Children's Privacy

    Our products are intended for adults. We do not knowingly collect data from children under 18. If we discover we've collected a child's data, we'll delete it immediately.

    11. Contact Us & Your Rights

    General Privacy Inquiries:

    Email: sales@adedesorganicfusions.com
    Phone: +254 796 410 434
    Address: Nairobi, Kenya

    To Report a Data Breach or File a Complaint:

    Contact: Office of the Data Protection Commissioner (ODPC)
    Email: complaints@odpc.go.ke
    Website: www.odpc.go.ke

    You have the right to lodge a complaint with the ODPC if you believe we've mishandled your data.

    12. Changes to This Privacy Policy

    We may update this policy to reflect changes in our practices or Kenyan law. We'll notify you of significant changes by:

    • Posting the updated policy on our website
    • Sending an email to newsletter subscribers