ChomaBaze Privacy Policy

Oct 18, 2026 ·
 

1. Who we are

ChomaBaze ("we", "us") delivers honestly weighed, charcoal-grilled nyama choma to homes in Nairobi. ChomaBaze is operated by FLYP TECHNOLOGIES, registered in Kenya.
 

This policy explains what personal data we collect when you visit chomabaze.com, place an order or contact us, how we use it, and the rights you have under the Kenya Data Protection Act, 2019. By using our website or ordering from us, you accept the practices described here.
 

2. Information we collect

We collect only what we need to take, prepare and deliver your order.

Contact details

Name, phone number, email address
When you order, create an account or contact us
 

Delivery details

Delivery address, estate or building, landmarks, delivery notes, location pin

When you order
 

Order details

What you ordered, weights, prices, order history

When you order
 

Payment details

M-Pesa phone number, transaction code, amount paid

When you pay
 

Communications

Messages, calls, reviews and feedback you send us

When you contact us
 

Device and usage data

IP address, browser type, pages visited, cookies

When you visit the website

We do not see or store your M-Pesa PIN or full card numbers. Card and mobile money payments are handled by our payment providers.
 

3. How we use your information

We use your personal data to:

• Process, prepare and deliver your orders

• Send you proof of your order's weight and updates on your delivery

• Confirm payments and issue receipts

• Answer your questions, complaints and refund requests

• Improve our menu, website and delivery service

• Prevent fraud and keep our records as the law requires

• Send you offers and news, but only if you have opted in. You can unsubscribe at any time.
   

We process your data because it is needed to fulfil your order, because you have given consent (for marketing), because we must meet legal obligations such as tax records, or for our legitimate interest in running and improving ChomaBaze.
 

4. Who we share it with

We never sell your personal data. We share it only with those who help us serve you:

• Delivery riders, who receive your name, phone number and delivery address for your order only

• Payment providers, such as M-Pesa (Safaricom) and [CARD PAYMENT PROVIDER], to process your payment

• Our website platform, Wix, which hosts chomabaze.com and stores order records

• Messaging tools, such as SMS or WhatsApp, which we use to send order updates

• Authorities, when the law requires it, for example the Kenya Revenue Authority or a court order

Some of these providers may store data outside Kenya. Where that happens, we make sure they protect it to the standard the Data Protection Act requires.
 

5. Cookies, storage and security

Cookies. Our website uses cookies to keep your cart, remember your preferences and tell us how the site is used. You can block or delete cookies in your browser settings, but parts of the site, like checkout, may not work without them.

How long we keep your data. We keep order and payment records for as long as Kenyan tax and business law requires, currently up to [7] years. We delete or anonymise other personal data when it is no longer needed, or sooner if you ask us to and the law allows.

Security. We use secure (HTTPS) connections, password-protected systems and limited staff access to protect your data. No system is completely secure, but if a breach puts your data at risk, we will notify you and the Office of the Data Protection Commissioner as the law requires.
 

6. Your rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Be told how your personal data is used, as this policy does

• Ask for a copy of the personal data we hold about you

• Ask us to correct data that is wrong or incomplete

• Ask us to delete data we no longer need or have no lawful reason to keep

• Object to us using your data, including for marketing

• Ask for your data in a format you can move to another service

To use any of these rights, contact us using the details below. We will reply within [14] days. If you are unhappy with our response, you can complain to the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.
 

7. Children

Our services are meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
 

8. Changes to this policy

We may update this policy as our service or the law changes. The date at the top shows when it was last updated. If we make important changes, we will tell you on our website or by message.
 

9. Contact us

For any privacy question or request, contact:

• Email: flyptechnologies@gmail.com

• Phone / WhatsApp: 0111655304

• Address: SAHARA IMAGINEERING GROUP, CROSSROADS PLAZA WESTLANDS UNIT 012, Nairobi, Kenya