PRIVACY POLICY
PRIVACY POLICY
Last Updated: 13-February-2026
Introduction
Carvin Ventures respects your privacy and is committed to protecting your personal data in accordance with the Data Protection Act, 2019 of Kenya.
This Privacy Policy explains how we collect, use, and safeguard your information when you use our website.
Information We Collect
We may collect:
Full name
Phone number
Email address
Delivery address
Payment information
IP address and browser data
How We Use Your Information
We use your data to:
Process and deliver orders
Communicate about purchases
Provide customer support
Improve our website
Prevent fraud
We DO NOT sell or rent your personal data to third parties.
Payment Information
Payments are processed through secure third-party payment providers (e.g., M-Pesa).
Data Sharing
We may share limited personal information with the following parties, only where necessary:
Courier Companies – We may share your shipping details (such as your name, phone number, and delivery address) to facilitate the delivery of your orders.
Payment Processors – We share necessary transaction details with payment service providers, including M-Pesa, to process and complete payments securely.
Legal and Regulatory Authorities – We may disclose your information where required by law, court order, or where necessary to respond to legal processes, investigations, or disputes involving authorized legal or law enforcement agencies.
We only share the minimum amount of information necessary for these purposes and take reasonable steps to ensure that third parties handle your data securely and in accordance with applicable laws.
Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, please note that no online platform or data transmission over the internet can be guaranteed to be 100% secure.
To help protect your account, we strongly recommend that you:
Do not save your passwords on shared or public browsers and devices.
Keep your login credentials confidential.
Use strong, unique passwords for your account.
Log out after accessing your account on shared devices.
Your account security also depends on your responsible handling of your password and login information. You are responsible for maintaining the confidentiality of your credentials and for all activities conducted under your account.
Your Rights
Under the Data Protection Act, you have the right to:
Access your personal data – Request a copy of the personal data we hold about you.
Request correction – Ask us to correct inaccurate or incomplete personal data.
Request deletion – Request the deletion of your personal data where it is no longer necessary or where processing is unlawful.
Withdraw consent – Withdraw your consent at any time where we rely on your consent to process your personal data.
Object to processing – Object to certain types of data processing, including direct marketing.
Request restriction of processing – Ask us to limit how we use your personal data in certain circumstances.
To exercise any of these rights, please contact us at:
We will respond to your request in accordance with applicable Kenyan data protection laws.
Changes to This Policy
We may update this Privacy Policy at any time. Updates will be posted on this page.