Privacy Policy
Last updated: 15 August 2026
DukaCart respects your privacy and is committed to protecting your personal data. This policy explains what information we collect when you use dukacart.co.ke, how we use it, and the rights you have over it under the Data Protection Act, 2019 of Kenya.
Data we collect
We collect only what is needed to process and deliver your order:
- Order data: full name, phone number, delivery location and address.
- Contact data: your email address when you write to us or use the contact form.
- Technical data: general browser and device information, and anonymous visit statistics used to improve the shop.
We never collect card or bank details. The shop operates entirely on cash on delivery, so there is no payment instrument for us to store — and nothing for anyone to steal from us.
How we use your data
- To prepare, pack and deliver your order to the address you gave us.
- To call you and confirm the order, or to update you on its status.
- To answer your questions and provide support.
- To improve our products, our service and how the site works.
Who we share it with
We do not sell or rent your data to anyone. We share only what is strictly necessary, with:
- Our courier partners: your name, phone number and address, for the sole purpose of delivering to you.
- Competent authorities: only where we are required to by law.
Cookies and measurement
We use cookies that are essential to the shopping cart and to remembering your language choice. We may also use aggregated, anonymous audience measurement (for example Google Analytics) to understand which pages are useful. You can disable cookies in your browser settings; the cart will then stop remembering your items.
Security and retention
We apply technical and organisational measures to protect your data against unauthorised access. Order data is kept for as long as our operational and accounting obligations require, and no longer.
Your rights
Under the Data Protection Act, 2019, you have the right to access your data, to have it corrected, to object to its processing, and to have it deleted. To exercise any of these, write to us at:
If you believe your data has been mishandled, you may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.