Privacy Policy

This Privacy Policy explains how Onty Kenya(“Onty”, “we”, “us”) collects, uses, and protects your personal information when you use our online store. We handle your data in line with the Kenya Data Protection Act, 2019. By using our website, you agree to this policy.

Information We Collect

We only collect what we need to run the store and fulfil your orders:

• Details you give us: your name, email address, phone number, and delivery details (recipient name, pickup station or address).
• Account information: if you sign in with Google, we receive your basic profile (name and email) from Google to create your account. We never see your Google password.
• Order & payment information: the items you order and the M-Pesa transaction confirmation we receive from Safaricom. We do not collect or store your M-Pesa PIN or full banking details.
• Technical information: basic device and log data, and essential cookies needed to keep you signed in and remember your cart.

How We Use Your Information

• To process, deliver, and manage your orders.
• To send you order confirmations and delivery updates.
• To provide customer support and respond to your enquiries.
• To protect against fraud and keep the store secure.
• To meet our legal, tax, and accounting obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Cookies

We use essential cookies only — these keep you signed in and remember your cart during your visit. We do not use advertising or third-party tracking cookies. You can block cookies in your browser, but some parts of the store may not work correctly.

Who We Share Information With

We share information only with the partners we rely on to run the store:

• Google — for optional sign-in (authentication) when you choose to log in with Google.
• Safaricom (M-Pesa) — to process your payment securely.
• Our hosting provider — which stores our website and database on our behalf.
• Delivery partners & pickup stations — the minimum details needed to get your order to you.

We may also disclose information where required by law or to protect our legal rights.

How Long We Keep It

We keep order records for as long as needed to fulfil your order and to meet our legal and accounting obligations. We keep your account information until you ask us to delete your account.

Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information, where we are not required to keep it.
• Object to or restrict certain uses of your information.

To exercise any of these rights, email us at hello@onty.co.ke.

Security

We take reasonable technical and organisational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Our store is intended for people aged 18 and over. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page.

Contact Us

Questions about your privacy? Email us at hello@onty.co.ke.