Legal
Privacy Policy
Last updated: 2026-10-24 · Effective on publication
§1Who is responsible for your data
NAJMA Organics, Pangani Chai Road, behind Leadway Petrol Station, Pangani, Nairobi, Kenya, decides how and why your personal data is used on this site. For any question about your data, write to support@najmaorganics.com or call 0726 734 732. We follow the Kenya Data Protection Act, 2019.
§2What we collect
What you give us: your name, email, phone number and delivery address; your password (stored only in scrambled form); the messages and forms you send us, including reviews and return requests.
What we record about your orders: what you bought, amounts, delivery and payment status, and Leaves earned and used. For M-Pesa we receive the transaction code, amount and phone number; we never see or store your M-Pesa PIN.
What your browser tells us: your device type, pages visited and the session identifier that keeps your cart. If you use the delivery address search, the text you type is sent to Google Maps to suggest addresses.
§3How we use it
To take and deliver your orders and keep you updated by SMS, WhatsApp, phone or email; to take payment and prevent fraud; to run your account and Leaves; to answer your questions and returns; to improve the shop; to send offers and news only if you have agreed (you can stop them at any time); and to meet legal and tax duties.
§4Why we are allowed to
Mostly because we need your data to carry out your order (contract). Other uses rest on our legitimate interest in keeping the shop secure and fraud-free, on your consent (marketing messages, optional cookies), or on a legal duty (tax and accounting records).
§5Who else handles your data
We share only what is needed with the services that help us run the shop: our payment providers (M-Pesa through Safaricom, and Kopo Kopo, which processes payment prompts), our email delivery provider (Brevo), our hosting and security provider (including Cloudflare), Google Maps for address suggestions, and the riders or couriers who deliver your parcel (your name, phone and address). They may only use your data to provide that service. We do not sell your data. Some of these providers are outside Kenya, and we choose providers that protect data to a proper standard.
§6How long we keep it
Order and payment records are kept for as long as Kenyan tax and accounting law requires us to keep business records. Account details stay until you ask us to delete the account. Marketing details stay until you unsubscribe. Messages and return requests are kept for as long as needed to resolve them and then removed or anonymised.
§7Your rights
You can ask to see the data we hold about you, to correct it, to have it deleted (unless we must keep it by law), to object to or limit how we use it, to take a copy, and to withdraw consent at any time. Write to support@najmaorganics.com and we will respond within 30 days. If you are not happy with our answer you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
§9Keeping it safe
Pages are served over an encrypted connection (HTTPS), passwords are stored scrambled and never in plain text, payment details are handled by the payment providers and not stored on our site, and only staff who need it can see customer data. No system is perfectly secure; if we ever learn of a breach that affects you, we will tell you and the ODPC as the law requires.
§10Children
The site is for adults. We do not knowingly collect data from anyone under 18. If you think a child has given us their data, tell us and we will delete it.
§11Changes to this policy
If we change how we use your data we will update this page and its date, and tell account holders by email if the change matters to them.
§12Contact
Data questions: support@najmaorganics.com or 0726 734 732. Post: NAJMA Organics, Pangani Chai Road, behind Leadway Petrol Station, Pangani, Nairobi, Kenya.
This document is provided for reference. For legal questions contact support@najmaorganics.com.