Policies

Privacy notice

What personal information we collect, why, and your rights under the Kenya Data Protection Act, 2019.

Last updated October 2026

Who we are

Sylvia's Basket, Limuru, Kiambu County, Kenya, is responsible for the personal information described here. Contact us about privacy at info@sylviasbasket.co.ke or +254 738 895395.

What we collect

  • When you order from the shop: your name, phone number, email, delivery address and what you ordered.
  • When you request a farm visit or a course: your name, phone number, email, group or organisation, the dates you prefer and any message you send.
  • When you contact us or subscribe to our newsletter: your name, email and your message.
  • When you pay or donate: a record of the payment from iPay, such as the amount, date and transaction reference. We never see your M-Pesa PIN or card details.

Why we use it

  • To process and deliver your order, arrange your visit or course, and reply to you.
  • To send you emails about your order, visit or course.
  • To send our newsletter, only if you subscribed. You can unsubscribe at any time from any newsletter email.
  • To keep records we are required to keep, such as payment records.
  • To protect our forms from spam and misuse.

Who we share it with

We do not sell your information. We share it only with services that help us run the website, and only as needed:

  • iPay, to process payments.
  • Our website host, database and email providers, to run the site and send emails.
  • Cloudflare Turnstile, which checks that forms are sent by people and not bots.
  • Mailchimp, for newsletter subscribers only.
  • A courier or rider, who receives your name, phone number and address to deliver your order.

How long we keep it

We keep order and payment records for as long as the law requires for business records. We keep visit, course and contact requests for up to two years, unless you ask us to delete them sooner.

Your rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Be told how your personal information is used.
  • Ask for a copy of the information we hold about you.
  • Ask us to correct information that is wrong.
  • Ask us to delete your information, where we are not required to keep it.
  • Object to us using your information, including for our newsletter.

How to use your rights or complain

Contact us at info@sylviasbasket.co.ke or +254 738 895395. We will reply within a reasonable time. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.

Cookies

We use only the small files (cookies and browser storage) needed for the site to work, such as remembering what is in your shopping cart. We do not use advertising cookies.