Privacy Policy
Last updated: January 2026 · Effective immediately
1. Introduction
KSM.store ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use and protect your personal information when you use kisumu.store.
By using KSM.store, you consent to the data practices described in this policy.
2. Information We Collect
Information you provide:
- Name, email address and phone number when you register
- Delivery address and location when placing orders
- M-Pesa phone number for payment processing
- Business details for vendor KYC verification
- Product reviews and ratings you submit
- Messages sent via our chat system
Information collected automatically:
- Products viewed and search queries
- Cart and wishlist contents (stored locally)
- Order history and transaction data
- Device type and browser information
- Push notification preferences
3. How We Use Your Information
- Processing and fulfilling your orders
- Sending order confirmations and delivery updates
- Processing M-Pesa payments via Safaricom Daraja
- Verifying vendor KYC applications
- Processing vendor payout requests
- Sending push notifications about your orders (if enabled)
- Improving our platform and services
- Preventing fraud and ensuring platform security
- Responding to your support queries
4. Data Storage & Security
Your data is stored securely on Google Firebase (Firestore) infrastructure. Firebase is hosted on Google Cloud Platform which meets international security standards.
- All data is encrypted in transit using HTTPS/TLS
- Firestore security rules restrict access to authorised users only
- Admin access is limited to authorised KSM.store staff only
- We do not store M-Pesa PINs or full payment card details
- Loyalty points and cart data are stored locally on your device
5. Sharing Your Information
We do not sell your personal information. We share your data only as necessary:
- With vendors: Your name, phone and delivery zone are shared with the vendor fulfilling your order
- With riders: Your name, phone and delivery address are shared with the assigned delivery rider
- With Safaricom: Your M-Pesa number and payment amount are shared for payment processing
- With Google: Analytics data is shared with Google Analytics to improve our service
- Legal requirements: We may share data if required by Kenyan law or court order
6. Cookies & Local Storage
KSM.store uses browser local storage (not cookies) to save:
- Your shopping cart contents
- Wishlist items
- Loyalty points balance
- Recent search history
- Push notification preferences
- Referral codes
This data stays on your device and is not transmitted to our servers unless you place an order.
7. Push Notifications
If you enable push notifications, we store your push subscription token on our servers to send you order updates. You can disable notifications at any time in your account settings or browser settings.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Opt out of marketing communications
- Disable push notifications at any time
To exercise these rights, email us at info@kisumu.store
9. Children's Privacy
KSM.store is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the platform or email. Continued use of KSM.store after changes constitutes acceptance of the updated policy.