Privacy Policy

Effective Date: 14 September 2026

Dekaki General Traders Limited
Registration No. PVT-MKU977YJ
Trading Name: Dekaki General Traders
Gaberone Plaza, 10th Floor, Gaborone Rd, Nairobi, Kenya
Phone: +254 711 511 713
Email: info@dekaki.co.ke

1. Introduction

Dekaki General Traders Limited, trading as Dekaki General Traders (“Dekaki”, “we”, “us”, or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:

  • Visit our website;
  • Browse our products;
  • Create an account;
  • Place an order;
  • Contact us;
  • Subscribe to communications;
  • Request customer support;
  • Participate in promotions; or
  • Otherwise interact with Dekaki.

This Privacy Policy applies primarily to our website and online services.

We process personal information in accordance with applicable Kenyan data-protection laws, including the Data Protection Act, 2019 and applicable regulations and guidance issued by the Office of the Data Protection Commissioner (ODPC).

2. Who We Are

The organisation responsible for the processing of personal information described in this Privacy Policy is:

Dekaki General Traders Limited
Registration No. PVT-MKU977YJ

Trading as:

Dekaki General Traders

Physical Address:
Gaberone Plaza, 10th Floor
Gaborone Rd
Nairobi, Kenya

Phone: +254 711 511 713
Email: info@dekaki.co.ke

For privacy-related questions or requests, customers may contact us using the details above.

3. What Is Personal Data?

Personal data is information that identifies, or can reasonably be used to identify, an individual.

Depending on how you interact with us, this may include:

  • Full name;
  • Telephone number;
  • Email address;
  • Delivery address;
  • Billing address;
  • County, town or location;
  • Order information;
  • Products purchased;
  • Payment-related information;
  • Customer-service communications;
  • Account information;
  • IP address;
  • Browser and device information;
  • Website usage information;
  • Cookie information; and
  • Information voluntarily provided when contacting us.

We only seek to collect information that is reasonably necessary for the relevant purpose.

Kenya’s Data Protection Act requires personal data to be adequate, relevant and limited to what is necessary for the purpose for which it is processed.

4. How We Collect Personal Data

We may collect information directly from you when you:

  • Create an account;
  • Place an order;
  • Complete the checkout form;
  • Contact us by phone, email or other communication channels;
  • Request a return or refund;
  • Submit an enquiry;
  • Subscribe to marketing communications;
  • Participate in a promotion or competition;
  • Submit a review or other website content; or
  • Otherwise voluntarily provide information.

We may also automatically collect certain technical information when you browse our website, such as your IP address, browser type, device information and website interaction data.

5. Personal Data Collected During Checkout

When you place an order, we may collect information necessary to process and deliver your purchase, including:

Identity information

  • Name

Contact information

  • Telephone number
  • Email address

Delivery information

  • County
  • Town/city
  • Estate or neighbourhood
  • Building/street information
  • House, office or unit details
  • Delivery instructions

Transaction information

  • Products ordered
  • Order value
  • Order number
  • Order date
  • Delivery status
  • Return/refund information

We use this information primarily to fulfil your order and provide customer support.

6. Payment Information

Depending on the payment method used, payment may be processed by Dekaki or by a third-party payment provider.

For example, if we introduce M-Pesa, card payments, PayPal, Pesapal, or another payment gateway, the relevant payment provider may process payment information in accordance with its own terms and privacy policy.

Where payment is processed through a third party, Dekaki generally does not need to store complete payment-card credentials.

Customers should avoid sending complete card numbers, PINs, passwords or other sensitive payment credentials to Dekaki through email, WhatsApp or ordinary customer-service messages.

7. Why We Collect and Use Personal Data

We may process personal data for the following purposes:

A. Processing orders

We use your information to:

  • Receive and process orders;
  • Confirm purchases;
  • Prepare products for dispatch;
  • Arrange delivery;
  • Contact you about your order; and
  • Provide after-sales support.

B. Customer service

We may use your information to:

  • Respond to enquiries;
  • Investigate complaints;
  • Process returns;
  • Process refunds;
  • Handle warranty matters; and
  • Provide other customer support.

C. Payments

We may process relevant information to:

  • Confirm payments;
  • Reconcile transactions;
  • Process refunds; and
  • Prevent fraudulent transactions.

D. Delivery

We provide relevant information to delivery partners where necessary to deliver your order.

This may include your:

  • Name;
  • Telephone number;
  • Delivery address; and
  • Order information.

E. Website operation

We may use technical information to:

  • Maintain website functionality;
  • Improve performance;
  • Detect security issues;
  • Understand website usage; and
  • Improve customer experience.

F. Fraud prevention and security

We may process information to detect, investigate and prevent:

  • Fraud;
  • Suspicious transactions;
  • Abuse of promotions;
  • Unauthorised account activity; and
  • Other unlawful or harmful activity.

G. Legal and regulatory obligations

We may process and retain information where necessary to comply with applicable laws, regulations, court orders, tax requirements, accounting obligations, or lawful requests from authorities.

8. Lawful Basis for Processing

Depending on the circumstances, Dekaki may process personal information on one or more lawful bases recognised under Kenyan data-protection law.

These may include:

Performance of a contract

Processing information may be necessary to fulfil an order or provide a service requested by you.

For example, we need your name, telephone number and delivery address to deliver a product you have purchased.

Legal obligation

We may process information where required to comply with a legal or regulatory obligation.

Consent

We may request your consent where consent is required, such as for certain marketing communications.

Legitimate interests

We may process certain information where necessary for legitimate business purposes, provided those interests do not improperly override your rights and freedoms.

Kenya’s Data Protection Act recognizes several lawful bases for processing, including consent, contractual necessity, legal obligations and legitimate interests in appropriate circumstances.

9. Marketing Communications

If you provide the appropriate consent, Dekaki may send you information about:

  • New products;
  • Promotions;
  • Discounts;
  • Special offers;
  • New services;
  • Company announcements; or
  • Other relevant marketing communications.

You may opt out of marketing communications at any time.

You can contact us at:

info@dekaki.co.ke

Marketing preferences will not normally affect transactional communications that are necessary to fulfil an existing order.

10. Sharing Personal Data With Third Parties

We may share relevant personal information with trusted third parties where necessary to operate our business.

These may include:

Delivery and logistics providers

We may provide delivery partners with information necessary to deliver your order.

Payment providers

Where applicable, payment providers may process information necessary to complete transactions.

Technology and hosting providers

Our website may rely on third-party providers for hosting, security, backups, email, analytics and other technical services.

Professional advisers

Where necessary, we may share relevant information with professional advisers such as legal, accounting or auditing professionals.

Government and regulatory authorities

We may disclose information where required or permitted by applicable law.

We do not sell customers’ personal information as a business practice.

11. Third-Party Service Providers

Some services used by our website may involve processing of personal data by third-party providers.

Examples may include:

  • WooCommerce/WordPress-related services;
  • Website hosting providers;
  • Payment gateways;
  • Courier companies;
  • Email providers;
  • Analytics services;
  • Website security providers; and
  • Marketing platforms.

Where we engage data processors, we seek to ensure that appropriate contractual and technical safeguards are in place.

12. International Data Transfers

Some technology or service providers used by Dekaki may process information outside Kenya.

Where personal data is transferred outside Kenya, Dekaki will take reasonable steps to ensure that applicable requirements concerning cross-border data transfers and appropriate safeguards are addressed.

Kenya’s Data Protection Act places requirements on transfers of personal data outside Kenya and requires appropriate safeguards or applicable consent in relevant circumstances.

13. Data Security

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access;
  • Unauthorised disclosure;
  • Loss;
  • Destruction;
  • Alteration;
  • Misuse; and
  • Other unlawful processing.

Security measures may include:

  • Access controls;
  • Password protection;
  • Secure website connections;
  • Regular software updates;
  • Restricted access to customer information;
  • Secure hosting and backups; and
  • Monitoring for suspicious activity.

However, no internet-based system can be guaranteed to be completely secure.

Customers should also take reasonable steps to protect their own information, including keeping account credentials confidential and avoiding sharing passwords or payment credentials with others.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or where a longer retention period is required or permitted by law.

For example, transaction information may need to be retained for:

  • Accounting;
  • Tax;
  • Auditing;
  • Warranty;
  • Returns;
  • Customer-service;
  • Fraud-prevention; or
  • Legal purposes.

When personal data is no longer reasonably required, we will take appropriate steps to delete, anonymise or securely dispose of it, subject to applicable legal and operational requirements.

The Data Protection Act requires personal data not to be retained in an identifiable form for longer than necessary for the purposes for which it was collected.

15. Cookies

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information stored on your device when you visit a website.

We may use cookies to:

  • Keep products in your shopping cart;
  • Maintain your login/session;
  • Remember preferences;
  • Improve website functionality;
  • Understand website traffic;
  • Improve website performance;
  • Provide security; and
  • Support relevant marketing or analytics functions where applicable.

You can configure your browser to restrict or block cookies. However, doing so may affect certain website functionality, including shopping-cart or checkout features.

16. Analytics

We may use analytics technologies to understand how visitors interact with our website.

This may help us understand:

  • Which pages are visited;
  • Which products receive interest;
  • How visitors navigate the website;
  • Website performance;
  • General traffic trends; and
  • How we can improve the customer experience.

Where analytics providers process personal data on our behalf, we expect them to process it according to applicable requirements and contractual arrangements.

17. Children’s Privacy

Our online store is intended primarily for adults purchasing products or services.

We do not knowingly seek to collect personal information from children for marketing purposes.

Where we become aware that personal information relating to a child has been collected in circumstances where appropriate authorisation was required, we will take reasonable steps to address the situation in accordance with applicable law.

18. Your Data Protection Rights

Subject to applicable legal conditions and limitations, you may have rights including:

  • The right to be informed about the use of your personal data;
  • The right to access personal data we hold about you;
  • The right to request correction of inaccurate or misleading information;
  • The right to object to certain processing;
  • The right to request deletion/erasure in applicable circumstances;
  • The right to restrict processing in applicable circumstances;
  • The right to data portability where applicable; and
  • The right to withdraw consent where processing is based on consent.

The Office of the Data Protection Commissioner identifies rights including being informed, access, rectification, erasure, objection, restriction and portability.

Some rights are subject to legal conditions and may not apply in every situation.

19. How to Exercise Your Rights

To make a privacy-related request, contact:

Dekaki General Traders Limited

Email: info@dekaki.co.ke
Phone: +254 711 511 713

Please provide sufficient information for us to understand your request and verify your identity where reasonably necessary.

This may include:

  • Your name;
  • Email address or telephone number;
  • Order number, where relevant;
  • Description of the request; and
  • Supporting information where appropriate.

We will handle legitimate requests within the timeframe required by applicable law.

20. Privacy Complaints

If you believe that your personal information has been handled improperly, we encourage you to contact Dekaki first so that we can investigate and attempt to resolve the concern.

You may also have the right to lodge a complaint with Kenya’s Office of the Data Protection Commissioner (ODPC).

The ODPC is responsible for regulating personal-data processing and protecting data-subject rights in Kenya.

21. Data Protection Officer / Privacy Contact

Where Dekaki is required to designate or appoint a Data Protection Officer under applicable law, the relevant contact details will be published on this website and communicated to the appropriate regulatory authority as required.

For general privacy enquiries until otherwise notified, customers may contact:

Dekaki General Traders Limited
Email: info@dekaki.co.ke
Phone: +254 711 511 713

The Data Protection Act contains specific requirements concerning designation and publication of DPO contact details where a DPO is required.

22. Data Breaches

If Dekaki becomes aware of a personal-data breach, we will assess the incident and take appropriate measures in accordance with applicable Kenyan data-protection requirements.

Depending on the nature and severity of the breach, this may include:

  • Containing the incident;
  • Investigating the cause;
  • Taking corrective security measures;
  • Notifying relevant authorities where required; and
  • Notifying affected individuals where required or appropriate.

23. Third-Party Websites

Our website may contain links to third-party websites, social-media platforms, payment services, manufacturers, delivery providers, or other external services.

This Privacy Policy does not govern how those third parties process personal information.

We encourage customers to review the privacy policies of third-party services before providing them with personal information.

24. Social Media

Dekaki may maintain social-media accounts or use social-media features on its website.

If you interact with us through a social-media platform, information you provide may also be processed by that platform according to its own privacy policy and terms.

Dekaki does not control the privacy practices of third-party social-media platforms.

25. Accuracy of Personal Information

We rely on customers to provide accurate and current information.

Please notify us if information you have provided changes or is inaccurate.

You may request correction of inaccurate or misleading personal information where applicable.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services;
  • New payment methods;
  • New technology;
  • Changes to our data-processing practices;
  • Changes to applicable law; or
  • Regulatory guidance.

When we make significant changes, we may update the effective date and provide additional notice where appropriate.

We recommend checking this page periodically.

27. Contact Us

For questions, concerns, requests or complaints relating to privacy or personal data, please contact:

Dekaki General Traders Limited

Registration No.: PVT-MKU977YJ
Trading Name: Dekaki General Traders

Physical Address:
Gaberone Plaza, 10th Floor
Gaborone Rd
Nairobi, Kenya

Phone: +254 711 511 713
Email: info@dekaki.co.ke