Privacy policy
This policy explains what personal information Picalu Creations collects when you use picalu.co.ke or order from us, why, and how we look after it, in line with Kenya's Data Protection Act, 2019.
What we collect
- Your order details: name, phone number, email address, delivery address and any notes you give us.
- Your photos and messages for personalising your gift.
- Payment details: the M-Pesa transaction code and amount you send us. We never see or store your M-Pesa PIN.
- Messages you send us on WhatsApp or by email.
Why we use it
- To make, deliver and support your order: checking your payment, sending your design proof, telling you when it's ready, and delivering it.
- To email you about your order (confirmation and updates).
- To keep records the law requires, and to protect against fraud (for example, each M-Pesa code is accepted once).
We don't sell or rent your information, and we don't send marketing messages unless you've asked us to.
Your photos
Photos you upload are kept private: they're never shown publicly, only you (through your order link) and our staff can see them, and we remove hidden details such as location from them when you upload. We delete them 90 days after your order is completed, delivered or cancelled. Photos you upload but don't order with are deleted within 2 days. Please only upload photos you have the right to use.
Who else sees it
Only those who help us serve you: our delivery couriers (name, phone and address for your delivery), our web host that stores the website, and WhatsApp or email when you contact us that way. Each sees only what they need.
How long we keep it
Order records (without your photos) are kept as long as the law requires for business and tax records, then deleted.
Cookies
We use only the cookies the shop needs to work — to keep your cart and checkout together, and to keep you secure. We don't use advertising or tracking cookies. If you choose light or dark mode, your browser remembers that choice on your device.
Your rights
You can ask to see the personal information we hold about you, to correct it, or to delete it (unless we must keep it by law), and you can object to how we use it. Contact us and we'll respond promptly. You may also complain to the Office of the Data Protection Commissioner (ODPC).
Contact
Picalu Creations, Twiga Towers, 6th Floor, Suite 610, off Moi Avenue, Nairobi. WhatsApp us for the quickest reply, or email info@picalu.co.ke.