Free Delivery in Nairobi > KES 3,500•7-Day Hassle-Free Exchanges•Instant Lipa na M-Pesa STK•AI Virtual Try-On Studio
Nkatha Lauret Nkatha Lauret
Kenya Data Protection Act, 2019 Compliant

Privacy Policy

Effective Date & Last Updated: September 2026 • Office of the Data Protection Commissioner (ODPC) Standards

Your privacy is paramount. Here is how Nkatha Lauret protects and respects your personal information.

1. Our Privacy Commitment

Nkatha Lauret is committed to protecting your personal data in strict compliance with the Data Protection Act, 2019 of the Republic of Kenya, the Data Protection (General) Regulations, 2021, and directives issued by the Office of the Data Protection Commissioner (ODPC).

This Privacy Policy explains what data we collect, why we collect it, how it is secured, and your statutory rights regarding your personal information.

2. Information We Collect

We only collect data strictly necessary to fulfill your fashion orders and enhance your personalized shopping experience:

Contact & Delivery Details
  • Full Name
  • Email Address (for receipts & OTP authentication)
  • Kenyan Mobile Phone Number (for M-Pesa & parcel courier)
  • Physical Delivery Address, Estate, and Town/County
Transactional & Payment Data
  • Order contents, selected sizes, quantities
  • Safaricom M-Pesa Receipt Number (e.g. TLX12345)
  • Timestamp and transaction status
  • We NEVER receive, store, or see your M-Pesa PIN
AI Virtual Try-On Imagery

When you use our Virtual Try-On feature, you may choose to upload a full-body photograph. This photograph is used strictly to synthesize how garments drape on your physique. We never sell, publicly display, or share your private photographs with third-party advertising networks. You can delete your uploaded body model at any time with one click from your Virtual Try-On profile.

3. Lawful Basis & Purposes of Processing

  • Contractual Fulfillment: Processing your cart, generating invoices/receipts, dispatching packages via couriers, and delivering your items.
  • Payment Reconciliation: Authenticating M-Pesa callbacks via Safaricom's official Daraja API.
  • Customer Service: Resolving delivery inquiries via WhatsApp or email, managing size exchanges, and processing approved refunds.
  • Consent (Marketing & Newsletter): Sending promotional discount codes (such as your KES 300 welcome coupon) only when you explicitly subscribe. You may unsubscribe anytime with a single click.

4. Third-Party Service Providers

We share your information solely with trusted infrastructure and delivery partners essential to service delivery:

  • Safaricom PLC: For automated M-Pesa Buy Goods STK Push and callback settlement.
  • Courier & Logistics Partners: (Fargo Courier, Wells Fargo, local dispatch riders) solely to navigate to your delivery doorstep or parcel station.
  • Transactional Email Infrastructure (Resend): To deliver your 6-digit login codes, order invoices, and PDF receipts.
  • Encrypted Cloud Storage (Supabase): Hosting databases with enterprise-grade row-level security (RLS) and AES-256 storage encryption.

5. Your Rights Under the Kenya Data Protection Act

Under Section 26 of the Kenya Data Protection Act, 2019, you have the right to:

  • Right to be Informed: To understand how your personal data is collected and processed.
  • Right of Access: To request a copy of the personal data we hold about you.
  • Right to Rectification: To request correction of inaccurate, outdated, or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): To request permanent deletion of your account, order archives, or uploaded try-on photos.
  • Right to Object: To opt out of promotional communications at any time.

6. Exercising Your Rights & Contacting Us

To exercise any of your data rights, request data deletion, or report a privacy concern, please contact our Data Protection Office: