PRIVACY POLICY
Last updated: September 2026
Letsy Digital Limited (“Letsy,” “we,” “us,” or “our”) is a company registered in Kenya, operating a multivendor online shopping and delivery platform that connects customers across Kenya with trusted shops, vendors, and delivery partners for convenient, reliable shopping (the “Platform”). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, use our mobile application, or otherwise interact with the Platform, and it describes your rights under the Kenya Data Protection Act, 2019. By creating an account, placing an order, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.
1. INFORMATION WE COLLECT
1.1 Information you give us When you create an account, place an order, register as a vendor, or contact our support team, we may collect:
• Full name
• Phone number and email address
• Delivery address(es) and precise or approximate location
• Account credentials (username and password)
• Order history, preferences, and communications with vendors, riders, or Letsy support
• For vendors and riders: business/registration details, national ID information, and bank or mobile money details required for onboarding and payouts
1.2 Device and usage information When you use our website or app, we automatically collect certain technical information, including:
• Device type, operating system, and unique device identifiers
• Browser type and language
• IP address and general geographic location
• Pages, products, and vendors viewed, and the date and time of access
• App performance and crash data This information helps us secure your account, prevent fraud, and improve the performance and usability of the Platform.
1.3 Payment information Payments on Letsy are processed through licensed, secure third-party payment providers, including mobile money services such as M-Pesa and, where supported, card payment processors. Letsy does not store your full card details or M-Pesa PIN. We may retain limited transaction metadata (such as amount, date, and payment status) needed to process, confirm, and reconcile your order.
1.4 Cookies and similar technologies Letsy uses cookies and similar technologies to keep you logged in, remember your preferences, analyze traffic and usage trends, and personalize your shopping experience. You may disable cookies through your browser or device settings; however, some features of the Platform may not function properly if you do so.
2. LEGAL BASIS FOR PROCESSING YOUR DATA
We process your personal data on one or more of the following legal bases recognized under the Kenya Data Protection Act, 2019:
• Performance of a contract to create your account, process your orders, and arrange delivery
• Legitimate interest to secure the Platform, prevent fraud, and improve our services
• Consent for marketing communications and certain uses of cookies, which you may withdraw at any time
• Legal obligation where we are required to retain or disclose information by law or a competent authority
3. HOW WE USE YOUR INFORMATION
We use the information we collect to:
• Create and manage your account, and process and deliver your orders
• Facilitate communication between customers, vendors, and delivery riders
• Process payments and prevent fraudulent or unauthorized transactions
• Provide customer support and respond to your enquiries
• Send order updates, receipts, and service-related notifications
• Send promotional offers and marketing communications, where you have opted in
• Analyze usage trends to maintain, secure, and improve the Platform
• Comply with applicable legal and regulatory obligations We only use your information to the extent necessary to provide our services responsibly, and we do not use it for purposes incompatible with those described in this Policy without notifying you.
4. HOW WE SHARE YOUR INFORMATION
Letsy does not sell your personal data. We may share limited information, only as necessary, with:
• Vendors, to fulfil the orders you place with them
• Delivery riders and logistics partners, to deliver your order to the correct location
• Payment providers (such as Safaricom M-Pesa), to process transactions securely
• Service providers who support our operations, such as SMS, hosting, and analytics providers, bound by confidentiality and data protection obligations
• Regulators, law enforcement, or other authorities, where required by Kenyan law or a valid legal process
• A successor entity, in the event of a merger, acquisition, or sale of Letsy’s business assets All third parties with whom we share your data are expected to handle it responsibly, securely, and in a manner consistent with this Policy.
5. DATA RETENTION
We retain your personal data for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, tax, or regulatory requirements, resolve disputes, and enforce our agreements. When your data is no longer needed for these purposes, we take reasonable steps to securely delete or anonymize it.
6. DATA SECURITY
We implement appropriate technical and organizational measures including access controls, encryption of sensitive data in transit, and secure payment processing through licensed partners to protect your information against unauthorized access, alteration, disclosure, or loss. However, no online platform can guarantee absolute security, and you also play a role in protecting your account by keeping your password confidential and not sharing your login details with others.
7. YOUR RIGHTS
Under the Kenya Data Protection Act, 2019, you have the right to:
• Be informed of how your personal data is used
• Access the personal data we hold about you
• Request correction of inaccurate or outdated data
• Request deletion of your data, subject to legal or contractual retention requirements
• Object to, or request restriction of, certain processing, including direct marketing
• Request a copy of your data in a portable format, where technically feasible
• Withdraw consent at any time, where processing is based on consent
8. CHILDREN’S PRIVACY
The Letsy Platform is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental or guardian consent, please contact us so that we can take appropriate action, including deletion of that data.
9. THIRD-PARTY LINKS AND SERVICES
The Platform may contain links to third-party websites, vendor storefronts, or services that are not operated by Letsy. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their privacy policies before providing them with any personal data.
10. INTERNATIONAL DATA TRANSFERS
Your data is primarily stored and processed within Kenya. Where we use service providers (such as cloud hosting or analytics) that process data outside Kenya, we take reasonable steps to ensure such transfers comply with the Kenya Data Protection Act, 2019, and that your data continues to receive an adequate level of protection.
11. CHANGES TO THIS PRIVACY POLICY
Letsy may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Material changes will be posted on the Platform along with the “Last updated” date above. Your continued use of Letsy after such changes take effect constitutes your acceptance of the revised Policy.
12. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please contact us:
Letsy Digital Limited
P.O Box 429–60200, Nkubu, Kenya
Email: [email protected]
Call / WhatsApp: 0748 000 864