Privacy Policy

Operated by Gula Ventures Limited (trading as Msoko)

Last Updated: 3 August 2026 · Version 1.0

Gula Ventures Limited (trading as “Msoko”, “we”, “our”, or “us”) operates msoko.com (the “Site”). We act as the Data Controller for the personal data you provide on our platform. We are committed to protecting your privacy in accordance with the Kenya Data Protection Act, 2019. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make a purchase.

Key Information	Details
Data Controller	Gula Ventures Limited (trading as Msoko)
Site	msoko.com
Applicable Law	Kenya Data Protection Act, 2019
Data Protection Officer	support@msoko.com
Your Legal Rights	Access, Correction, Erasure, Objection

1. Information We Collect

1.1 We collect personal data to process your orders and improve your shopping experience. This includes:

Identity Data:: Full name, username, or similar identifiers.
Contact Data:: Billing address, delivery address, email address, and phone number.
Financial Data:: M-Pesa transaction IDs or masked card details. We do not store complete bank card pin numbers.
Transaction Data:: Details about payments to and from you, and products you purchased.
Technical Data:: IP address, browser type, time zone setting, and cookies.

2. How We Use Your Data

2.1 We only use your personal data when Kenyan law allows us to. Most commonly, we use your data to:

Fulfil Orders: Deliver products, process payments, and provide receipts.
Support Customers: Respond to your inquiries and manage returns.
Marketing: Send promotional updates via SMS, email, or WhatsApp, only if you have given explicit consent.
Legal Obligations: Comply with tax laws and local financial regulations.

3. Legal Basis for Processing

3.1 Under the Kenya Data Protection Act, 2019, our legal grounds for processing your data are:

Consent: You gave us clear consent (e.g., signing up for a newsletter).
Contract: Processing is necessary to fulfil your order.
Legal Obligation: Processing is required to comply with Kenyan laws.

4. Sharing Your Data

4.1 We do not sell your personal data. We only share your data with trusted third parties to run our business:

Delivery & Courier Services: To ship your packages to your address.
Payment Gateways: To process M-Pesa, Airtel Money, or card payments.
Technology Providers: Cloud hosting services and website analytics tools.

5. Data Security

5.1 We have put in place appropriate security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed without authorization. We limit access to your data to employees and partners who have a business need to know.

6. Your Legal Rights

6.1 As a data subject in Kenya, you have the following rights under the Data Protection Act:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request that we fix incomplete or inaccurate data.
Right to Erasure: Request that we delete your personal data from our systems.
Right to Object: Object to the processing of your data for direct marketing.

6.2 To exercise any of these rights, please contact us at the email address provided in Section 8 of our Terms and Conditions, or at support@msoko.com.

7. Data Retention

7.1 We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

8. Changes to This Policy

8.1 We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date above.

END OF PRIVACY POLICY