Privacy policy

Last updated 16 October 2026

This explains what personal information Siah Deliveries collects, why, who sees it, how long we keep it and your rights under Kenya's Data Protection Act, 2019.

What we collect

• Your account: username, first and last name, email, phone number and password. Passwords are stored scrambled; nobody at Siah Deliveries can read them.
• Delivery details: the names, phone numbers, email and address you save.
• Orders and payments: what you order, prices, M-Pesa confirmation codes and amounts.
• Messages you send us on an order.
• Packing photos of your parcel, taken in China before it ships.
• Google sign-in: if you use it, Google shares your name and email with us.

Why we use it

• To run your account and your orders: buying, shipping, collection and contacting you about them. This is needed to carry out our agreement with you.
• To check payments and stop fraud, which is in our and our customers' legitimate interest.
• To keep tax and accounting records, which the law requires.

We don't sell your information and we don't send you marketing.

Who can see it

• Our admins see your orders and details to run them.
• Collection staff see only your name, and only after you give the right pickup code.
• Our team in China sees the parcel and its photos. Suppliers don't get your personal details.
• Service providers that run the site for us: website hosting, database and photo storage, and our email service. They may store information outside Kenya. We only use providers that protect it with suitable safeguards, as the Data Protection Act requires.

Cookies

We only use the cookies needed to keep you signed in and to protect forms. We don't use advertising or tracking cookies. Your cart and chosen currency are saved in your own browser.

How long we keep it

• Packing photos: deleted 90 days after you collect your order.
• Orders and payments: 5 years, as tax law requires.
• Your account: until you ask us to delete it.

Your rights

• See the information we hold about you, and correct it. You can change most of it yourself in My account.
• Ask us to delete your account. We remove your personal details, but keep order and payment records for as long as tax law requires.
• Object to how we use your information.
• Complain to the Office of the Data Protection Commissioner (odpc.go.ke) if you are unhappy with how we handle it.

To use any of these rights, email [email to be added]. We reply within 7 days.

If something goes wrong

If your information is ever exposed in a security breach, we will tell the Data Protection Commissioner within 72 hours and tell you as soon as we can.