Privacy policy
Last updated: March 31, 2026
This Privacy Policy describes how Euro and East Coast Supply Group Limited collects, uses, and discloses your personal information when you visit, use, or make a purchase through our online store, or otherwise communicate with us. Our store is hosted and powered by Shopify. By using our store, you acknowledge that you have read and understood this policy. Where there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs in all matters relating to the collection, processing, and disclosure of your personal information.
1. Who We Are
Euro and East Coast Supply Group Limited is a retail business registered and operating in Kenya. Our store operates Physically and on the Shopify platform. For any privacy questions, contact us at Info@euroeastcoastsupply.co.ke or call +254 115 731 052.
2. Personal Information We Collect
The term personal information refers to information that identifies you or can reasonably be linked to you. We collect the following categories of personal information depending on how you interact with our store:
2.1 Information You Provide Directly
• Contact details including your name, billing address, shipping address, phone number, and email address
• Financial information including credit card, debit card, M-Pesa, and other payment details, transaction records, and payment confirmation
• Account information including your username, password, security questions, preferences, and settings
• Transaction information including items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, and your order history
• Communications you send to us including customer support enquiries and any other correspondence
2.2 Information Collected Automatically
• Device and network information including your IP address, browser type, device type, operating system, and unique device identifiers
• Usage information including how and when you interact with or navigate our store, pages visited, and time spent on pages
• Information collected through cookies and similar tracking technologies as described in Section 7
2.3 Information from Third Parties
• Shopify, which hosts our store and collects information about your access and use of the Services
• Payment processors including M-Pesa, Visa, and Mastercard providers who confirm transaction status
• Shipping and logistics partners who provide delivery tracking and address verification
• Business and marketing partners where you have interacted with them online
• Social media platforms if you log in or connect your account via those platforms
3. How We Use Your Personal Information
We use your personal information for the following purposes:
3.1 Providing and Improving Our Services
We use your information to process your payments, fulfil your orders, arrange shipping, handle returns and exchanges, create and manage your account, remember your preferences and items of interest, send order and account notifications, and create a personalised shopping experience including product recommendations based on your purchase history and activity.
3.2 Marketing and Advertising
Where you have opted in or where permitted by applicable law, we use your information to send marketing and promotional communications by email, SMS, or post, and to show you relevant advertisements on our store and other websites based on your browsing and purchase activity.
3.3 Security and Fraud Prevention
We use your information to authenticate your account, secure your payment and shopping experience, detect and investigate potentially fraudulent, illegal, unsafe, or malicious activity, and protect the safety of our store and its users. You are responsible for keeping your account credentials confidential. Do not share your username or password with anyone.
3.4 Customer Communication
We use your information to respond to your enquiries, provide customer support, and maintain our business relationship with you.
3.5 Legal Compliance
We use your information to comply with applicable Kenyan and international law, respond to valid legal process including requests from law enforcement or government agencies, participate in legal proceedings, and enforce or investigate potential violations of our policies.
4. Legal Basis for Processing
We process your personal data only where we have a lawful basis under the Data Protection Act No. 24 of 2019 (Kenya). Our lawful bases are:
• Contract performance: processing necessary to fulfil your order and manage your account
• Legal obligation: compliance with applicable Kenyan laws and regulations
• Legitimate interests: fraud prevention, security, analytics, and service improvement
• Consent: where you have clearly opted in, such as to receive marketing communications
5. How We Share Your Personal Information
We do not sell, rent, or trade your personal data. We disclose your information only in the following circumstances:
• With Shopify and technology vendors who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping
• With business and marketing partners to provide advertising and marketing services, where permitted by law. Shopify may support personalised advertising with third-party services based on your activity across different merchants and websites
• When you direct or consent to disclosure, for example when shipping requires sharing your details with a courier or when you use social media login integrations
• With our affiliates or within our corporate group where applicable
• In connection with a business transaction such as a merger, acquisition, or insolvency proceeding
• To comply with legal obligations, respond to subpoenas or search warrants, enforce our policies, or protect the rights of our store and its users
6. Our Relationship with Shopify
Our store is hosted by Shopify Inc. Information you submit to our store is transmitted to and processed by Shopify, as well as third parties that may be located in countries other than Kenya. Shopify collects and processes personal information about your access to and use of our store in order to provide and improve the Services. Shopify is independently responsible for the processing of your personal information in connection with its own platform, including responding to requests you make to exercise your rights over data processed by Shopify. To learn more about how Shopify handles your personal information, visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy. To exercise your rights over data processed by Shopify directly, visit https://privacy.shopify.com/en.
7. Cookies and Tracking Technologies
Our store uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device. We use the following types:
• Strictly necessary cookies: required for the store to function, including cart and session management
• Performance cookies: help us understand how visitors use our store to improve functionality
• Marketing cookies: used to deliver relevant advertising, only with your consent
You can manage or disable cookies through your browser settings. Disabling strictly necessary cookies may affect the functionality of our store.
8. Third-Party Websites and Links
Our store may contain links to third-party websites or platforms. We do not control, endorse, or take responsibility for the privacy practices or content of those sites. If you follow a link to a third-party site, you should review its own privacy and security policy. Information you share on public or semi-public venues, including third-party social networks, may be viewable by other users without limitation.
9. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:
• Order and transaction records: 7 years as required by Kenyan tax and commercial law
• Account data: for the duration your account is active, plus 2 years after closure
• Marketing data: until you withdraw consent or unsubscribe
After the applicable retention period, we securely delete or anonymise your data.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration, including SSL encryption for all data transmissions and restricted internal access to personal data. No security measure is perfect or impenetrable. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us. In the event of a data breach, we will notify affected individuals and the Office of the Data Protection Commissioner of Kenya as required by law.
11. International Transfers
Your personal information may be transferred to, stored, and processed outside Kenya. This occurs primarily because our store is hosted by Shopify, which operates globally. Where personal information is transferred internationally, we ensure appropriate safeguards are in place, including contractual protections equivalent to those required under Kenyan data protection law.
12. Children
Our store is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you are the parent or guardian of a child who has provided us with their personal information, contact us at the details below and we will delete it. As of the effective date of this policy, we do not knowingly sell or share the personal information of individuals under 16 years of age.
13. Your Rights and Choices
Depending on where you reside, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may be subject to legal exceptions:
• Right to access: request a copy of the personal information we hold about you
• Right to erasure: request deletion of personal information we hold where there is no lawful basis to retain it
• Right to rectification: request correction of inaccurate or incomplete information
• Right to data portability: receive your data in a structured, commonly used format and request its transfer to a third party
• Right to object: object to processing based on legitimate interests
• Right to restrict processing: request that we limit how we use your information
• Right to withdraw consent: at any time, where processing is based on your consent
• Managing marketing preferences: you may opt out of promotional emails at any time using the unsubscribe link in any marketing email. We may still send non-promotional communications such as order confirmations and account notices
To exercise any of these rights, contact us at Info@euroeastcoastsupply.co.ke or 0115 731 052. We will respond in a timely manner as required by law. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request. You may also designate an authorised agent to make requests on your behalf, provided the agent can demonstrate your authorisation and we can verify your identity directly. For rights relating to data processed by Shopify, visit https://privacy.shopify.com/en.
14. Complaints
If you have a complaint about how we handle your personal information, contact us using the details below. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya. If you reside in another jurisdiction, you may contact your local data protection authority.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will post the revised policy on our store with an updated effective date and provide notice as required by applicable law. Continued use of our store after changes are posted constitutes acceptance of the revised policy.
16. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy, contact us at:
Euro and East Coast Supply Group Limited
Yakuti Close, Off Koita Street, Industrial Area, Nairobi, Kenya
Info@euroeastcoastsupply.co.ke
+254 115 731 052