Last updated: July 2026

At Trivo Kenya, we take your privacy seriously. This policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or make a purchase. It applies to all users of trivokenya.store.

1. Information We Collect

We collect the following categories of information to provide and improve our service:

Information you provide directly:

Account details: When you sign up, we collect your full name, email address, phone number, and password (stored securely as a hashed credential via Supabase Auth).
Order information: When you place an order, we collect your name, phone number, delivery address or location, and order notes. We do not store payment card details — payments are processed via M-PESA, bank transfer, or cash on delivery, none of which are handled on our servers.
Communications: Any messages, inquiries, or feedback you send us via WhatsApp, email, or website forms.
Profile data: Your wishlist items, review submissions, and order history associated with your account.

Information collected automatically:

Usage data: Pages visited, time spent, referral source, and interactions with our site — collected via Vercel Analytics and Speed Insights (aggregated, not personally identifiable).
Device data: Browser type, operating system, device type, and IP address (used for security and rate-limiting only).
Cookies: Essential cookies for session management and authentication. No third-party tracking or advertising cookies are used.

2. How We Collect Your Data

We collect data through the following methods:

Account registration and checkout forms — when you sign up, log in, or place an order on trivokenya.store.
WhatsApp conversations — when you contact us directly for orders or support.
Automated technologies — Vercel Analytics tracks anonymized page views and interactions. Essential cookies are set by Supabase Auth for session management.
Newsletter subscription — when you voluntarily subscribe via our email form (powered by Resend).

3. How We Use Your Information

We use your data for the following purposes:

Processing and fulfilling your orders, including sharing delivery details with our courier partners.
Communicating order updates, confirmations, and receipts via WhatsApp and email.
Sending password reset emails (via Resend) when you request one.
Sending welcome emails to new admin and vendor accounts.
Sending newsletter updates (only if you have subscribed — you may unsubscribe at any time).
Improving our website, product selection, and customer experience through analytics.
Preventing fraud, abuse, and unauthorized access through rate-limiting and IP monitoring.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Sharing & Third Parties

We share your data only with trusted service providers who help us operate our business:

Supabase (nsfnhsfxqildfhqkssyo.supabase.co) — Database, authentication, and file storage. Your data is stored on Supabase's infrastructure. See Supabase Privacy Policy.
Vercel — Website hosting and analytics (anonymized). See Vercel Privacy Policy.
Resend — Transactional email delivery (password resets, receipts, notifications). See Resend Privacy Policy.
WhatsApp (Meta) — Customer communication and order confirmations. See WhatsApp Privacy Policy.
Courier partners — Your name, phone number, and delivery address are shared with our logistics partners solely for delivery purposes.

5. Data Security

We take reasonable measures to protect your data:

All traffic is encrypted via HTTPS (TLS 1.3).
Passwords are hashed and managed by Supabase Auth — we never store plain-text passwords.
API keys and secrets are stored as environment variables and never exposed client-side.
Administrative and vendor API routes require authentication verification before accessing sensitive data.
Rate-limiting is applied to sensitive endpoints (login, password reset, registration) to prevent brute-force attacks.

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Order records are retained for accounting and warranty purposes for up to 6 years as required by Kenyan law. You may request deletion of your data at any time (see Section 8).

7. Cookies

We use a minimal set of cookies:

Essential/authentication cookies — Set by Supabase Auth to maintain your logged-in session. These are strictly necessary for the website to function.
Analytics cookies — Vercel Analytics uses cookies to count page visits and track navigation paths. No personal data is collected. You can opt out via your browser settings.

We do not use advertising, tracking, or third-party marketing cookies. You can control or delete cookies through your browser settings at any time.

8. Your Rights (Under Kenyan Data Protection Law)

Under the Kenya Data Protection Act, 2019, you have the following rights:

Right to access — Request a copy of the personal data we hold about you.
Right to rectification — Correct any inaccurate or incomplete data.
Right to deletion — Request that we delete your personal data (subject to legal retention requirements).
Right to restrict processing — Limit how we use your data.
Right to data portability — Receive your data in a structured, machine-readable format.
Right to object — Object to the processing of your data for direct marketing.

To exercise any of these rights, contact us via WhatsApp or email hello@trivokenya.store. We will respond within 30 days as required by law.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email or website notice. We encourage you to review this policy periodically.

11. Contact

If you have any questions, concerns, or requests regarding this policy or your data:

WhatsApp: +254 740 610 772
Email: hello@trivokenya.store
Website: trivokenya.store
Location: Nairobi, Kenya

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.