Privacy Policy

What data we collect

• Account data: name, email address, and hashed password when you register
• Order data: shipping address, payment method (tokenised, not stored in full), and order history
• Usage data: pages visited, search terms, and click events for analytics
• Device data: browser type, OS, and IP address for security and geo-routing

How we use your data

• To process and fulfil your orders
• To send transactional emails (order confirmation, shipping updates)
• To improve our platform through aggregated, anonymised analytics
• To detect and prevent fraud and account abuse

Data sharing

We do not sell your personal data. We share data only with suppliers (to fulfil your order), payment processors (Stripe, M-Pesa), and logistics partners (to ship your order). All third parties are GDPR-compliant where applicable.

Your rights

• Access: request a copy of all data we hold about you
• Correction: update inaccurate personal information
• Deletion: request erasure of your account and order data
• Portability: receive your data in a machine-readable format
• Objection: opt out of marketing emails at any time

To exercise any of these rights, email privacy@citysoko.com. We will respond within 30 days.