Privacy Policy

1. Who We Are

Scents City Thika (“we”, “us”, or “our”) is a luxury perfume retailer based in Thika Town, Kiambu County, Kenya. We operate the website scentcityperfumes.com and sell fragrances via online orders with delivery across Kenya.

For any privacy-related enquiries, contact us at: scentcityperfumerythika@gmail.com or call 0703 557 863.

2. Information We Collect

We collect information you provide directly when you:

• Create an account (name, email address, password)
• Place an order (name, phone number, email, delivery address)
• Make an M-Pesa payment (phone number, transaction reference)
• Contact us via WhatsApp, email, or our website
• Subscribe to our newsletter

We also automatically collect limited technical information including:

• IP address and browser type (for security and analytics)
• Pages visited and time spent on the site (via cookies)
• Device type (mobile or desktop)

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders
• Send you order confirmations and delivery updates
• Process M-Pesa payments and verify transactions
• Provide customer support via WhatsApp and email
• Send promotional emails and offers (only if you have subscribed)
• Improve our website and product offerings
• Comply with legal and regulatory obligations
• Prevent fraud and protect the security of our platform

4. M-Pesa Payment Data

We use the Safaricom M-Pesa Daraja API to process mobile payments. When you pay via M-Pesa, we collect your phone number and the M-Pesa transaction reference number provided by Safaricom. This data is used solely to confirm and record your payment.

We do not store your M-Pesa PIN or any sensitive payment authentication details. All M-Pesa transactions are processed securely through Safaricom's infrastructure. Safaricom's own privacy policy governs how they handle payment data on their side.

5. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share data with:

• Safaricom — to process M-Pesa payments
• Supabase — our secure cloud database and authentication provider
• Resend — our email delivery provider for order confirmations and notifications
• Delivery partners — your name, phone number, and delivery address are shared with our delivery riders to complete your order
• Legal authorities — if required by Kenyan law or a court order

6. Cookies

Our website uses cookies — small text files stored on your device — to keep your shopping cart active between visits, keep you logged in, and understand how visitors use our site. You can disable cookies in your browser settings, but this may affect the functionality of the website (for example, your cart may not persist).

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Order records are retained for a minimum of 5 years in compliance with Kenyan tax and business laws. You may request deletion of your account data at any time by contacting us.

8. Your Rights

Under Kenyan data protection law (Data Protection Act, 2019), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict how we process your data
• Withdraw consent to marketing emails at any time

To exercise any of these rights, contact us at scentcityperfumerythika@gmail.com. We will respond within 30 days.

9. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Passwords are hashed and never stored in plain text. Access to customer data is restricted to authorised personnel only.

However, no method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us