Our Privacy Commitment in Brief
We collect only the data necessary to provide seamless grocery shopping, accurate local deliveries, smart expense analytics, and reliable merchant POS operations. We do not sell your personal data to third parties or data brokers. You maintain full control over your personal information, including rights to access, download, or delete your data at any time.
Overview & Scope
This Privacy Policy applies to personal and business data collected by pdshopping ("we", "us", or "our") when you interact with our website, mobile applications, customer shopping portals, expense tracking utilities, and merchant point-of-sale software.
This policy complies with applicable data protection laws, including the Kenya Data Protection Act 2019, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and relevant international privacy standards.
Information We Collect
We collect information directly from you, automatically through your device, and from authorized partners when necessary to fulfill our services:
A. Personal Account & Identity Data
When creating an account, we collect your full name, email address, phone number, delivery addresses, and profile preferences. For social authentication or single sign-on (SSO), we receive identification tokens from the provider.
B. Marketplace Transactions & Orders
When you purchase goods or groceries, we record purchased items, quantities, transaction totals, delivery notes, and timestamp records. Payment details (credit card tokens or mobile money M-Pesa identifiers) are securely processed by PCI-DSS certified payment processors.
C. Expense Tracking & Budget Information
When you use our budgeting tools, we store the expense categories, budgets, receipt logs, and spend notes that you manually enter or import. This data remains private to your account.
D. Merchant, Store & POS Records
For retailers and store partners using our POS and inventory system, we collect business registration names, tax identification numbers, catalog listings, barcode databases, cashier names, sales histories, and store locations.
E. Geolocation Data
With your permission, we access precise or approximate GPS coordinates to calculate delivery fees, dispatch nearby couriers, and show relevant local supermarkets and retail shops.
F. Technical & Device Information
We collect IP addresses, browser types, operating systems, device identifiers, referring URLs, and diagnostic crash logs to maintain platform integrity and protect against malicious attacks.
How We Use Your Information
We use personal and operational data for the following legitimate purposes:
- Order Processing & Fulfillment: Transmitting order details to merchants and delivery drivers to pack and deliver your groceries.
- Financial & Budget Insights: Providing breakdowns, expense summaries, and spending trends within your account dashboard.
- Point of Sale Management: Synchronizing stock levels, issuing official sales receipts, and managing inventory audits for retailers.
- Customer Care & Support: Investigating issues, processing refunds, and answering support tickets.
- Security & Fraud Prevention: Detecting unauthorized logins, preventing fraudulent payments, and enforcing our Terms of Use.
- Service Improvement: Analyzing aggregated usage patterns to refine search indexing and speed up page load times.
Legal Bases for Processing
Under statutory data protection frameworks, we rely on the following lawful bases to collect and process your personal data:
To deliver products you order, process payments, and maintain your account under our service agreement.
To secure our infrastructure, prevent fraud, optimize app performance, and improve consumer experience.
To comply with tax records, commercial billing regulations, and valid law enforcement orders.
For optional promotional newsletters or device-level location permissions, which you may revoke at any time.
Sharing & Disclosure of Data
We do not sell, rent, or monetize your personal data. We only share data with third parties in the specific contexts listed below:
- Merchants & Store Operators: When you place an order, the merchant receives your name, ordered items, and delivery specifications to prepare the basket.
- Logistics & Courier Partners: Delivery drivers receive the destination delivery address, contact phone number, and recipient name solely to complete dispatch.
- Payment Service Providers: Regulated payment gateways process your transactions under strict security encryption standards.
- Infrastructure Service Providers: Cloud hosting, database clusters, and transactional email providers who adhere to strict Data Processing Agreements (DPAs).
- Legal Requirements: If compelled by a court order, subpoena, or statutory requirement to protect public safety or legal rights.
Data Retention & Archival
We retain your personal information for as long as your account remains active, or as needed to provide you services:
- Account Credentials & Profiles: Retained until you request account deletion.
- Financial & Order Ledgers: Commercial transaction receipts are retained for up to seven (7) years to comply with tax, accounting, and anti-money laundering statutory obligations.
- Expense Logs & Budgets: Retained for your ongoing reference until deleted by you or upon account closure.
Data Security Measures
We implement rigorous technical and organizational safeguards to protect your personal and transaction information:
End-to-End Encryption
All communications are encrypted in transit using TLS 1.3. Database volumes and backups are encrypted at rest using AES-256.
Access Controls & RBAC
Strict role-based access privileges ensure staff and cashiers only access data strictly required for their operational tasks.
Your Privacy Rights & Controls
Regardless of your location, you have strong statutory rights regarding your personal information:
- Right to Access: Request a copy of all personal data pdshopping holds about you.
- Right to Rectification: Request correction of inaccurate or incomplete profile and billing details.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and personal records, subject to legal retention requirements.
- Right to Data Portability: Request your order history and expense datasets in a structured, machine-readable format (such as JSON or CSV).
- Right to Withdraw Consent: Opt out of marketing communications or revoke location permissions at any time.
To exercise any of these rights, email us at privacy@pdshopping.com. We process verified requests within thirty (30) days without fee.
International Data Transfers
Our servers, database replicas, and edge networks are hosted in secure global cloud environments. When we transfer personal data across borders, we ensure adequate protection through standard contractual clauses and regulatory compliance mechanisms.
Children's Privacy Protection
pdshopping is not intended for or marketed to children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has registered an account without parental consent, we will promptly delete that account and associated data.
Updates to This Policy
We may update this Privacy Policy from time to time to accommodate statutory updates, new application features, or security enhancements. When changes occur, the "Last Updated" date will reflect the new version. We recommend reviewing this page periodically.
Contact Our Data Protection Officer
For any data protection inquiries, audit requests, or supervisory authority contact, please direct correspondence to our Data Protection Officer:
pdshopping Office of Data Protection
Email: dpo@pdshopping.com
Website: https://pdshopping.com
Headquarters: Nairobi, Kenya
Questions or Concerns?
We are committed to operating with complete transparency and compliance.
If you have any questions, complaints, or requests regarding pdshopping's Privacy Policy, or if you would like to exercise any of your statutory data rights, please reach out directly: