Privacy Policy

Bestee Kids Shop ("Bestee", "we", "us") sells children's clothing and accessories online at besteekids.co.ke, via WhatsApp and at our shop at Comet Mall, 1st floor shop 31, Monrovia Street (near Loita Street, next to Anniversary Towers), Nairobi. We are the data controller for the personal data described in this policy. You can reach us at hello@besteekids.co.ke or 0791 691 427.

• Order details: your name, phone number, email address, delivery area and address, and the items you buy.
• Payment confirmation: Paystack processes your M-Pesa or card payment. We receive a payment reference and status — we never see or store your card number or M-Pesa PIN.
• Newsletter: your email address if you join the Bestee Club.
• Messages: what you send us on WhatsApp, email or phone.
• Device data: basic technical information (such as browser type) and the contents of your bag, wishlist and compare list, which are stored in your own browser.

We do not knowingly collect personal data from children. Orders must be placed by a parent, guardian or other adult.

• To process, deliver and support your orders — necessary to perform our contract with you.
• To send receipts, delivery updates and answer questions — contract and legitimate interest.
• To send newsletters and offers — only with your consent, which you can withdraw at any time.
• To prevent fraud, keep accounting records and meet tax obligations — legal obligation and legitimate interest.

We share only what is needed with trusted service providers acting on our instructions: Paystack (payments), our delivery partners and riders (name, phone and address), Supabase (secure database hosting), Resend (transactional email), Vercel (website hosting) and Meta/WhatsApp when you choose to message us there. We never sell your personal data.

Some providers store data outside Kenya. Where this happens we rely on appropriate safeguards as required by the Data Protection Act, 2019 and its regulations.

We keep order records for up to seven (7) years to meet tax and accounting requirements. Newsletter data is kept until you unsubscribe. WhatsApp conversations are kept for as long as needed to support your order.

Under the Data Protection Act, 2019 you have the right to be informed, to access your data, to object to processing, to correct or delete inaccurate or unlawfully held data, and to data portability. To exercise any right, email us and we will respond within the timelines set by law.

If you are unhappy with how we handle your data, you may complain to the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.

We use encryption in transit (HTTPS), access controls and reputable, certified providers. Order data is never readable from the public website. No system is perfectly secure, so please contact us right away if you suspect misuse.

We may update this policy from time to time. The date at the top shows the latest version.