Privacy Policy

ShopSwift Solutions is the registered business name in Kenya that operates the ShopSwift marketplace and trades under the ShopSwift brand. Where applicable, ShopSwift Solutions acts as the data controller for personal data processed through the platform.

ShopSwift currently supports marketplace experiences for Kenya, Tanzania, Rwanda, Uganda, Somalia, South Sudan, and Ethiopia. Local mandatory privacy laws may give users additional rights.

This policy describes our processing practices. Where the law requires consent — including for non-essential cookies or direct marketing — we ask for it separately rather than treating use of the platform as blanket consent.

• Account and profile data: name, email, phone number, profile information, country, language, and delivery details.
• Seller and verification data: store information and, where required, identity, business, tax, payout, and KYC information.
• ShopSwift Business data: company registration details, tax identifiers, billing contacts, staff memberships and roles, spending/approval limits, RFQs, supplier quotations, PO/LPO records, procurement documents and business delivery locations.
• Order and transaction data: products, quantities, prices, delivery records, payment method, transaction references, refunds, disputes, and settlement records.
• Device and usage data: IP address, browser/device information, pages viewed, searches, clicks, and security logs.
• Location data: country, region, county/town and approximate location inferred from settings or device/network information. Precise device location is used only where the feature requests permission and you allow it.
• Communications: buyer-seller messages, support requests, reviews, product questions, and dispute evidence.
• Consent and preference records: cookie choices, marketing preferences, timestamps, IP address, and user-agent information used to evidence consent or withdrawal.

We process personal data only where we have an appropriate lawful basis under applicable law. Depending on the activity, this may include:

• Contract: creating accounts, processing orders, arranging delivery, providing receipts, and administering marketplace services.
• Legal obligation: tax/accounting records, lawful regulatory requests, fraud controls, and seller verification where legally required.
• Legitimate interests: platform security, abuse prevention, service improvement, and protecting buyers, sellers, and ShopSwift, where those interests are not overridden by user rights.
• Consent: direct marketing, optional advertising/analytics technologies, and other processing where consent is legally required. Consent can be withdrawn without affecting earlier lawful processing.

We use data to operate checkout and fulfilment, recommend products, support Near You discovery, provide customer support, prevent fraud, investigate disputes, improve marketplace performance, administer promotions and affiliate attribution, and comply with law.

When you voluntarily use ShopSwift AI features, your query and relevant marketplace context may be processed by an AI service provider to generate a response or promotional output. Do not submit passwords, payment PINs, full card numbers, or unnecessary sensitive personal data to AI features.

Product recommendations and ranking may use automated signals such as searches, clicks, location preferences, availability, wishlist activity, and purchase history. ShopSwift does not rely solely on those recommendation systems to make legal or similarly significant decisions about you.

We do not sell personal data. We disclose only what is reasonably necessary to operate the marketplace or meet legal obligations.

• Sellers: order and fulfilment information needed to supply your purchase, which may include your name, delivery location and necessary contact details.
• Payment providers: providers such as Safaricom/M-Pesa, Airtel Money, DPO, Flutterwave, PayPal, Chapa, WaafiPay, AzamPay, and other enabled processors.
• Delivery/logistics providers: contact and delivery information needed to deliver an order.
• Technology providers: hosting, database, storage, email, security, analytics, AI, and support providers used to operate ShopSwift.
• Advertising/measurement partners: Google, Meta, TikTok, Microsoft, Pinterest or similar providers only when their integration is configured and the required analytics/marketing consent has been given.
• Authorities or professional advisers: where disclosure is required by law, court order, regulatory obligation, or reasonably necessary to establish or defend legal rights.

ShopSwift does not intentionally collect or store your M-Pesa PIN, card CVC/CVV, or full payment-card number. Card and hosted-wallet details are entered into the relevant payment provider's secure checkout where that method is enabled.

We retain payment status, provider, amount, transaction/reference identifiers, refund information and settlement records needed to operate orders, prevent fraud, reconcile accounts and meet legal obligations.

For ShopSwift Business, authorised members of the same company account may see procurement records according to their assigned roles. Verified suppliers receive only the RFQ, contact, delivery and commercial information reasonably needed to prepare or fulfil an offer.

ShopSwift uses essential cookies and browser storage for login, security, cart, country/currency/language, and consent preferences. Optional analytics and marketing technologies are disabled until the relevant consent is recorded.

For details, including third-party advertising pixels and how to change your choices, see the Cookie & Similar Technologies Policy.

We use reasonable technical and organisational safeguards such as HTTPS/TLS, password hashing, access controls, audit logging, least-privilege administration and security monitoring. No internet service can guarantee absolute security.

Because ShopSwift serves multiple countries and uses cloud/service providers, personal data may be processed outside your country. For transfers from Kenya, we use the safeguards required by the Kenya Data Protection Act, including appropriate contractual, legal, consent or adequacy mechanisms where applicable.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including account operation, order fulfilment, fraud prevention, disputes, accounting, tax and other legal requirements.

Retention periods differ by record type. When data is no longer required, it is deleted, anonymised or securely archived in accordance with our retention schedule and applicable law. Some transaction, audit, dispute and security records may need to be retained after an account is closed.

For users protected by the Kenya Data Protection Act 2019, rights include being informed about use of personal data, access, objection, correction of false or misleading data, and deletion of false or misleading data. Other rights, including portability, restriction or erasure, may apply depending on the processing and applicable law.

You may also withdraw consent for marketing or optional tracking at any time. Direct-marketing messages will provide an appropriate opt-out mechanism.

To exercise a right, email solutionsswiftmart@gmail.com. We may need to verify your identity before fulfilling a request.

ShopSwift accounts and marketplace transactions are intended for persons aged 18 and above. We do not knowingly permit children to create marketplace accounts. If you believe a child has provided personal data through an account, contact us so we can investigate and take appropriate action.

We may update this policy when our services, providers or legal obligations change. Material changes will be communicated through an appropriate platform notice, email or renewed consent where required by law. The current version and update date will remain available on this page.

ShopSwift Solutions — registered business name in Kenya, trading as ShopSwift.

Email: solutionsswiftmart@gmail.com

WhatsApp: +254 792 660 915

Website: shopswift.co.ke

If a Kenya privacy concern cannot be resolved with us, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC). Users elsewhere may also contact the relevant local privacy regulator.