Legal

Privacy Policy

Last updated: 30 July 2026

Etsirbella Designs Ltd ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us when you browse or shop at etsirbelladesignsltd.co.ke (the "Site"). This policy explains what we collect, why we collect it, and the choices you have. It's written to reflect Kenya's Data Protection Act, 2019.

1. Who we are

Etsirbella Designs Ltd, Kibra, Nairobi, Kenya.
Email: info@etsirbelladesignsltd.co.ke
Phone / WhatsApp: +254 716 538 070

2. Information we collect

  • Account details — name and email address, if you register for an account.
  • Order details — name, email, phone number, delivery details, and the items you buy, when you check out.
  • Payment information — we do not store your card or M-Pesa PIN. Payments are processed by our payment partner (Jenga / M-Pesa); we only receive confirmation of payment status and a transaction reference.
  • Contact form submissions — name, email, subject, and message, when you write to us.
  • Reviews — name, email, star rating, and comment, if you leave a product or store review. Reviews are checked before they appear publicly.
  • Cart and wishlist — held in your browser session so your bag and saved items persist while you shop. This is not permanently tied to your identity unless you're logged in.
  • Technical data — standard web log data (IP address, browser type, pages visited) collected automatically for security and site performance.

3. How we use your information

  • To process and fulfil your orders, and to confirm them with you (including over WhatsApp, see Section 5).
  • To create and manage your account, if you have one.
  • To respond to enquiries submitted through our contact form.
  • To display approved product and store reviews.
  • To keep the Site secure and working properly.
  • To meet legal, tax, and accounting obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Payments

Card and M-Pesa payments are handled by our payment gateway partner (Jenga, operated by KCB Bank Kenya). When you pay, your payment details are sent directly to and processed by Jenga under their own privacy and security terms — we never see or store your M-Pesa PIN or full card number. We receive only the outcome of the transaction (success/failure) and a reference number, which we use to update your order status.

5. WhatsApp

To confirm orders and respond to enquiries quickly, we use WhatsApp click-to-chat links. If you choose to use these, a chat opens between you and our business WhatsApp number with a summary of your order or message pre-filled — you decide whether to send it. Any message you send over WhatsApp is subject to WhatsApp's own privacy policy, as it is a third-party messaging platform we don't control.

6. Cookies and session data

We use essential session cookies to keep you logged in and to remember the contents of your shopping bag and wishlist as you browse. These are required for the Site to function and don't track you across other websites.

7. Sharing your information

We share personal data only where necessary, with:

  • Our payment processor, to complete transactions.
  • Delivery/logistics partners, to get your order to you.
  • Service providers who help us run the Site (e.g. hosting), bound to keep data confidential.
  • Authorities, where required by Kenyan law.

8. Data retention

We keep order and payment records for as long as needed to meet tax and accounting obligations under Kenyan law. Contact messages and unapproved reviews are kept only as long as needed to action or moderate them. You can ask us to delete your account data at any time, subject to what we're legally required to retain.

9. Your rights

Under the Data Protection Act, 2019, you have the right to:

  • Know what personal data we hold about you.
  • Request a copy of it.
  • Ask us to correct inaccurate data.
  • Ask us to delete data we no longer have a lawful reason to keep.
  • Object to certain uses of your data.
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

To exercise any of these rights, email info@etsirbelladesignsltd.co.ke.

10. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No method of transmission over the internet is 100% secure, but we work to keep your information safe.

11. Children

The Site is not directed at children, and we do not knowingly collect personal data from anyone under 18 without parental consent.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Continued use of the Site after changes means you accept the updated policy.

13. Contact us

Questions about this policy or your data? Reach us at info@etsirbelladesignsltd.co.ke or +254 716 538 070, or visit us in Kibra, Nairobi, Kenya.