Privacy Policy

Last Updated: 07 May 2025

Introduction

Welcome to Emalii.

Emalii is an e-commerce platform operated by Emalii Group Limited, a company incorporated in the Republic of Kenya, with its principal place of business in Kenya (“Emalii”, “we”, “us”, or “our”). Emalii offers products and services to users in Kenya and internationally through its website, mobile applications, and related digital platforms (collectively, the “Platforms”).

We respect your privacy and are committed to protecting your personal data in compliance with the Kenya Data Protection Act, 2019, regulations issued by the Office of the Data Protection Commissioner (ODPC), and applicable international data protection principles.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use our Platforms and services (the “Services”).

By using Emalii, you acknowledge that you have read and understood this Privacy Policy.

IMPORTANT INFORMATION AND WHO WE ARE Controller

Emalii Group Limited is the data controller responsible for your personal data.

Data Protection Officer (DPO)

We have appointed a Data Protection Officer responsible for overseeing data protection matters.

Contact details: Email: legal@emalii.com

Support: support@emalii.com

You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) (www.odpc.go.ke ). We encourage you to contact us first so we can address your concerns promptly.

CHILDREN’S DATA

Our Platforms are not intended for children (persons below the age of majority under applicable law).

We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

PERSONAL DATA WE COLLECT

“Personal Data” means any information that identifies or can be used to identify you. We may collect the following categories:

a) Identity Data

Full name

Username or account identifier

Date of birth

Gender

Nationality

b) Contact Data

Email address

Phone number

Billing and delivery address

c) Transaction & Financial Data

Order details and purchase history

Payment method details (processed securely by third-party payment providers)

Refund and chargeback information

d) Technical Data

IP address

Browser type and version

Device type and operating system

Time zone and location data

Cookies and similar tracking technologies

e) Profile & Usage Data

Account login credentials (encrypted)

Preferences, interests, and wish lists

Reviews, feedback, and survey responses

Interaction with products, sellers, and features

f) Marketing & Communications Data

Marketing preferences

Communication history with Emalii

Aggregated & Anonymized Data

We may use anonymized or aggregated data for analytics and business insights. This data does not identify you personally.

HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data through:

Direct interactions

When you:

Create an account

Place an order or make a payment

Contact customer support

Submit reviews, feedback, or complaints

Participate in promotions or surveys

Automated technologies

Through cookies, log files, pixels, and similar technologies when you browse or use our Platforms.

Third parties

Including:

Payment service providers

Logistics and delivery partners

Marketing and analytics providers

Social media platforms (if you choose to connect)

If you share third-party data with us, you confirm that you have obtained lawful consent to do so.

PURPOSES FOR PROCESSING YOUR PERSONAL DATA

We use your personal data to:

Provide and manage our Services

Process orders, payments, deliveries, and refunds

Verify identity and prevent fraud

Communicate with you about orders, accounts, and support requests

Improve our Platforms, features, and user experience

Personalize content, recommendations, and offers

Send marketing communications (where permitted)

Comply with legal and regulatory obligations

Protect the security and integrity of Emalii and its users

LEGAL BASIS FOR PROCESSING

We process personal data based on one or more of the following lawful grounds:

Performance of a contract

Legal obligation

Legitimate business interests

Consent, where required (especially for marketing)

You may withdraw consent at any time.

SHARING OF PERSONAL DATA

We do not sell your personal data.

We may share your data with:

Logistics and fulfillment partners

Payment processors

IT, analytics, and cloud service providers

Marketing and advertising partners

Government or regulatory authorities (where legally required)

Professional advisers (lawyers, auditors)

All third parties are contractually required to protect your data and use it only for authorized purposes.

INTERNATIONAL DATA TRANSFERS

As a Kenyan-based platform offering global services, your personal data may be transferred outside Kenya.

Where this occurs, we ensure:

Adequate data protection safeguards

Contractual protections aligned with Kenyan law

Compliance with ODPC requirements

DATA RETENTION

We retain personal data only for as long as necessary to:

Fulfill the purposes outlined in this Privacy Policy

Meet legal, regulatory, and accounting requirements

Resolve disputes or enforce agreements

When no longer required, data is securely deleted or anonymized.

DATA SECURITY

We implement appropriate technical and organizational security measures, including:

Encryption

Secure servers and firewalls

Restricted access controls

PCI-DSS compliant payment processing

However, no system is 100% secure. You are responsible for keeping your login credentials confidential.

YOUR DATA SUBJECT RIGHTS

Under the Kenya Data Protection Act, you have the right to:

Be informed about data collection and use

Access your personal data

Request correction or deletion

Object to or restrict processing

Withdraw consent

Lodge a complaint with the ODPC

Requests can be sent to legal@emalii.com . We respond within statutory timelines.

We use cookies to:

Enable core platform functionality

Remember preferences

Analyze traffic and improve performance

You can manage cookies through your browser settings. Disabling cookies may affect functionality.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Changes will be posted on the Platforms and take effect immediately upon publication.

Your continued use of Emalii constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or your personal data:

📧 legal@emalii.com

📧 support@emalii.com