Privacy Policy

Fechi Organics (“we”, “us”, or “our”) is a Kenyan organic beauty and wellness brand committed to keeping your personal information safe. This Privacy Policy explains what data we collect when you visit our website or place an order, how we use it, and the rights you hold under Kenyan law.

By using the Fechi Organics website or purchasing our products, you agree to the practices described in this policy. If you do not agree, please do not use our services.

This policy applies to all personal data processed by Fechi Organics in connection with our e-commerce operations in Kenya and is effective as of 7 June 2026.

We collect information you give us directly and information gathered automatically as you use our website.

Information you provide:

• Name and email address — when you create an account or place an order.
• Phone number — for order delivery coordination.
• Delivery address — street, city, county, and postcode for shipping.
• Payment information — we do not store your card details. Payments are processed securely by our third-party payment processor and are subject to their privacy policy.

Information collected automatically:

• Device and browser data — IP address, browser type, operating system.
• Usage data — pages visited, time on site, links clicked, referral source.
• Cookie data — session identifiers, preferences, and analytics markers (see Section 6).

We use your personal data only for the following purposes:

• Processing and fulfilling your orders, including payment verification and delivery.
• Sending order confirmations, dispatch notifications, and delivery updates.
• Responding to your customer support enquiries.
• Improving our website, product range, and user experience through analytics.
• Sending marketing communications — only where you have given your consent, and only until you unsubscribe.
• Complying with our legal obligations under Kenyan law, including tax record-keeping.

We will never use your data in a way that is incompatible with the purpose for which it was collected, and we do not make automated decisions about you that produce significant legal effects.

Our processing of your personal data is governed by the Kenya Data Protection Act 2019. We rely on the following lawful bases:

• Contract performance — processing your order and delivering your products.
• Legitimate interest — improving our services, preventing fraud, and ensuring website security.
• Consent — sending marketing emails or SMS; you may withdraw consent at any time.
• Legal obligation — retaining financial records as required by Kenyan tax regulations.

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing. To withdraw consent, email us at hello@fechiorganics.com.

We do not sell your personal data. We share it only where strictly necessary to operate our business:

• Payment processors — to securely handle card and mobile money transactions.
• Delivery and logistics partners — your name, phone number, and delivery address to facilitate shipping.
• Email service provider (Resend) — to send transactional and marketing emails on our behalf.
• Analytics tools — aggregated, anonymised usage data to understand how our website is used.

All third parties we share data with are contractually required to process it only for the specified purpose, maintain adequate security measures, and comply with applicable data protection law. We do not transfer your data outside Kenya except where necessary and with appropriate safeguards in place.

Our website uses cookies — small text files stored on your device — to make the site work properly and improve your experience. We use:

• Session cookies — keep you logged in during your visit; deleted when you close your browser.
• Preference cookies — remember your currency selection and display settings.
• Analytics cookies — help us understand traffic patterns and popular pages (data is aggregated and anonymous).

You can control cookies through your browser settings. Disabling cookies may affect some functionality (such as staying logged in or retaining your cart contents). Most browsers allow you to block third-party cookies specifically while keeping essential cookies active.

We keep your personal data only for as long as necessary:

• Order and transaction records — 7 years, as required for tax compliance under Kenyan law.
• Account data — retained until you request deletion of your account.
• Marketing preferences — until you unsubscribe; we will then delete your address from our marketing lists promptly.
• Analytics data — aggregated and anonymised; no individual retention limit applies.

When data is no longer required, we securely delete or anonymise it so it cannot be linked back to you.

Under the Kenya Data Protection Act 2019 you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request that we delete your data, subject to legal retention requirements.
• Right to restriction — ask us to pause processing of your data in certain circumstances.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to data portability — receive your data in a portable, machine-readable format.

To exercise any of these rights, email us at hello@fechiorganics.com with the subject line “Data Rights Request”. We will respond within 30 days. We may need to verify your identity before processing your request.

Our website and services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will delete it promptly.

If you believe a child has submitted personal data to us, please contact us at hello@fechiorganics.com so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account, or
• Posting a prominent notice on our homepage.

The “Effective Date” at the top of this page will always reflect when the current version came into force. We encourage you to review this policy periodically. Continued use of our website after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please get in touch: