Privacy Policy

1. What we collect

• Account details: name, mobile number, email, and a password (stored only as a one-way hash; we cannot read it).
• Orders: what you ordered, from which shop, delivery address, payment status and M-Pesa references, ratings and messages sent through Happy SI, including on WhatsApp.
• Location: a delivery location if you choose to share it; for riders, their position while a delivery is active.
• Partners: business details and verification documents such as national ID, registration papers and KRA PIN.
• Technical: IP address and basic logs of sign-ins and requests, used for security.

2. Why we use it

• to run your account, process orders and payments, and arrange delivery;
• to confirm your phone number and email, and to let you reset your password;
• to verify partners and keep the marketplace safe, including preventing fraud;
• to send service messages about your account and orders;
• to meet legal obligations, such as tax and accounting records.

3. Who sees it

• The shop you order from sees your name, phone number, delivery details and order, so it can fulfil it.
• The rider delivering your order sees what is needed to deliver it.
• Service providers that run parts of Happy SI for us: cloud hosting (Amazon Web Services), WhatsApp messaging (Meta), M-Pesa payments (Safaricom) and our email provider. They may only use the data to provide their service.
• Authorities when the law requires it.

We do not sell personal data or use it for third-party advertising.

4. Where it is stored

Our servers are currently located outside Kenya, in the European Union. Data sent there is protected by the safeguards described in this policy and handled in line with the Data Protection Act.

5. How long we keep it

We keep account and order data while your account is open, and afterwards only as long as needed for legal, tax, dispute or fraud-prevention reasons. Partner verification documents are kept while the shop is active and for a limited period after it closes. Then we delete or anonymise the data.

6. Security

We protect data with measures including hashed passwords, sign-in tokens that expire, confirmation of phone numbers and emails, rate limits on sign-in attempts, and administrative access that is restricted to private network connections. No system is perfectly secure; if a breach affects you, we will notify you and the regulator as the law requires.

7. Browser storage

The website stores sign-in tokens and your cart in your browser so you stay signed in and keep your basket. We do not use advertising or tracking cookies.

8. Your rights

You can ask to access, correct or delete your personal data, object to its use, or ask for a copy. Email support@happysi.co.ke; we may need to confirm your identity first. Some data must be kept for legal reasons even after you close your account.

If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.

9. Children

Happy SI is not intended for anyone under 18, and we do not knowingly collect their data.