Privacy statement

What we collect depends on what you do in the shop.

• When you order: your name, phone number, email address, delivery address or the pin you place on the map, notes you add for delivery, the products you buy, and whether you collect or have it delivered.
• When you pay: how you chose to pay. For Paynow (card, EcoCash, OneMoney, InnBucks) we keep your order reference, the amount and the wallet phone number you give us for EcoCash or OneMoney. Your card details are entered on Paynow and never reach us.
• When you pay by RTG staff salary deduction: your unit, department and, if you give it, a next of kin name and phone number. For SSB: your EC number, national ID number, ministry and, if you give it, a next of kin. We use these only to arrange and administer the deduction.
• When you create an account or sign in: your name and email address, and your password (kept in a protected form by our sign-in service). If you sign in with Google, Google shares your name and email address with us. We never see your Google password.
• When you use features: the products you save to your wishlist, reviews you write (shown with your name), star ratings and feedback you give about your order or delivery, and data deletion requests you send us.
• From your device: your IP address and browser details, which our hosting and security tools use to run the shop and to limit abuse. Your browser also keeps a small amount of data on your device, described below.

• To take, deliver and confirm your orders, and to contact you about them, for example when your order is ready to collect.
• To take payment, or to arrange the salary deduction you chose.
• To keep your account and wishlist, and to show products you may like based on what you viewed, saved and bought.
• To email you about your order: a confirmation, and later a short request to rate your experience. We do not use your email for advertising.
• To ask for and publish reviews, and to improve the shop from the ratings and feedback you give.
• To keep the shop safe: preventing fraud, abuse and repeated or automated requests, and meeting legal, tax and accounting duties.

We do not sell your personal data. We share it only with the people and services that help us run the shop, and only what they need:

• Paynow, to process card and mobile money payments.
• Google, for sign-in with Google and for the map you use to choose a delivery location.
• Our technology providers: Supabase (our database and account service) and MailerSend (order and feedback emails).
• Our own staff who prepare, deliver and look after your order, and the payroll or SSB teams where you chose salary deduction.
• Authorities, where the law requires it.

The shop stores a little data in your browser so it works properly: your cart, the products you recently viewed, your wishlist before you sign in, your sign-in session, and a note that you already rated an order. We do not use it for advertising. Google sign-in is loaded from Google and may set its own cookies, which Google controls. The checkout map comes from OpenStreetMap, which receives the area of the map you view and any address you look up there, but sets no cookies. You can clear your browser data at any time, and the shop will simply forget these things.

We keep order, payment and salary-deduction records for as long as we need them to run the order, handle returns and complaints, and meet our accounting, tax and legal duties. Account and wishlist data stays until you ask us to delete it. Where the law does not require us to keep something, we delete it when you ask.

We use reasonable measures to prevent unauthorised access to, and misuse of, personal data: connections to the shop are encrypted, access to customer records is limited to the staff who need it, and the shop limits repeated requests to stop abuse. No online service can promise perfect security, so please use a strong password and tell us at once if you think your account was misused.

You can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it. To have your data deleted, use the request form below. We will contact you to check it is really you before we act. Some records, such as orders and payments, may have to be kept where the law requires it. For anything else, email or call us using the details on our Contact page.

Request data deletion