Privacy Policy
Last updated: September 15, 2026 • Effective immediately
1Introduction
Welcome to IMELDAHWEAR KE ("we," "our," or "us"). We respect your personal privacy and are committed to safeguarding the personal data you share with us in accordance with the Kenya Data Protection Act, 2019.
This Privacy Policy explains what personal information we collect when you visit our website (www.imeldahwear.co.ke), place an order for cute sleepwear and loungewear, make payments via M-Pesa (processed securely through Tuma API), or communicate with our customer care team via WhatsApp.
2Information We Collect
When you browse our catalog or initiate a checkout purchase, we collect the necessary information required to process and fulfill your order:
- Contact Information: Your full name, mobile phone number (used for M-Pesa STK Push and WhatsApp delivery coordination), and optional email address.
- Delivery & Shipping Details: Your designated county, town, estate or landmark, and chosen courier or Matatu Sacco pickup station.
- Payment & Transaction Records: M-Pesa transaction reference codes, transaction amounts, timestamps, and payment verification receipts. We never see, store, or have access to your private M-Pesa PIN.
- Order History: The items, sizes, variants, prices, and delivery notes associated with your purchases.
3How We Use Your Data
Order Fulfillment
To prepare your package, print your official receipt, and dispatch your items to your selected delivery station or doorstep.
Payment Processing
To initiate M-Pesa STK Push prompts via Tuma Payment Gateway (api.tuma.co.ke) and verify payment receipt through automated webhook callbacks.
WhatsApp Order Notifications
To send you automated dispatch confirmations, parcel tracking information, and receipt copies via WhatsApp.
Customer Support & Security
To answer inquiries, process exchanges where applicable, and prevent fraudulent transactions.
4Third-Party Service Providers
We do not sell, rent, or trade your personal data. We only share essential data with trusted service providers who help operate our platform:
- Tuma Technologies (Tuma API — api.tuma.co.ke): Payment gateway infrastructure partner utilized for initiating M-Pesa STK push prompts and verifying mobile money transaction settlements.
- Courier & Parcel Partners: Dedicated delivery partners and Matatu Sacco parcel offices (e.g., 2NK, Super Metro, North Rift, etc.) solely to ensure your package reaches you safely.
- Cloud & Database Infrastructure: Supabase and Vercel cloud platforms, providing encrypted database storage and secure HTTPS web hosting.
5Data Retention & Security
We employ strict technical and organizational safeguards—including SSL/TLS 256-bit encryption, strict row-level security (RLS) on our databases, and access control policies—to protect your personal information against unauthorized access, loss, or alteration.
Order and transaction records are securely retained for the duration required to provide customer service, comply with Kenyan financial accounting obligations, and resolve any delivery disputes.
6Your Rights & Contact Us
Under the Data Protection Act, you have the right to request access to your personal data, request corrections to inaccurate information, or request the deletion of your contact details once all pending orders have been completed.