Privacy Policy

Last updated: 4 July 2026 · Governed by the Kenya Data Protection Act, 2019

1. Who we are

Sokommerce ("we", "us") operates the online marketplace at www.sokommerce.com, connecting independent sellers ("Sellers") with buyers ("Buyers") across Kenya. Sokommerce is operated by A&K Worldwide Enterprises FZCO. For any privacy matter, contact us via WhatsApp or email listed on our website.

2. Data we collect

Buyers: name, phone number, delivery address and city, order details, and payment status. We do not store your M-PESA PIN or full payment credentials — payments are processed by our licensed payment partner (IntaSend Solutions Ltd) and Safaricom M-PESA.

Sellers: name, phone/WhatsApp number, email address, shop details, product listings, order and payout records.

Automatically: device and usage data (pages visited, approximate location, browser type) via cookies and similar technologies, including the Meta Pixel for advertising measurement.

3. Why we use your data (lawful bases)

To create and deliver orders (contract performance); to process payments and hold funds in escrow until delivery (contract & legitimate interest in fraud prevention); to send order and payment notifications by SMS, WhatsApp or M-PESA prompt (contract); to prevent fraud and abuse (legitimate interest & legal obligation); to improve our services and measure advertising (legitimate interest / consent for cookies); to comply with Kenyan law, including tax and consumer-protection obligations.

4. Payments & escrow

Buyer payments are collected via M-PESA through IntaSend and held by Sokommerce until delivery is confirmed ("escrow"). If delivery fails or the order is validly cancelled, the amount is refunded to the Buyer's M-PESA number. Payment partners process your phone number and transaction data under their own privacy policies.

5. Sharing

We share data only with: the Seller fulfilling your order (name, phone, delivery address); payment processors (IntaSend, Safaricom); logistics/fulfilment partners where applicable; advertising and analytics providers (e.g. Meta) in aggregated or pixel-based form; and authorities where required by law. We never sell your personal data.

6. Retention

Order and transaction records are kept as long as required for legal, tax and dispute purposes (generally up to 7 years). Marketing data is kept until you opt out. You may request deletion of your account data at any time, subject to legal retention duties.

7. Your rights (Kenya DPA 2019)

You have the right to access, correct, or delete your personal data; to object to or restrict processing; to data portability; and to withdraw consent. To exercise these rights, contact us. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya — www.odpc.go.ke.

8. Security

We use encryption in transit, access controls, payment-state verification, and fraud-prevention systems (including order limits and blocked-number lists) to protect your data. No system is 100% secure; report any concern to us immediately.

9. Children

Sokommerce is not directed at persons under 18. We do not knowingly collect data from minors.

10. Changes

We may update this policy; the latest version always applies and is published on this page.