Privacy Policy

Redki (operated by [Redki legal entity name], registered in Kenya at [registered address]) runs redki.ke and the Redki WhatsApp channel, where you can buy certified refurbished devices and book repairs.

This policy explains what personal data we collect, why, and the choices you have. It applies whether you reach us on the website, on WhatsApp, or by SMS.

• Identity & contact: name, phone number, email, delivery address.
• Order & repair data: items bought, device details (make, model, IMEI), reported issues, diagnostic results, quotes and approvals.
• Payment references: M-Pesa transaction codes and amounts. We never see or store your M-Pesa PIN.
• Messages: your conversations with Redki on WhatsApp and SMS, so we can act on your requests and keep a record of approvals.
• Device & usage data: pages visited and basic analytics on redki.ke, collected via cookies (see section 7).

• To fulfil orders, arrange delivery or pickup, and process repairs you approve.
• To send order, repair and warranty updates on WhatsApp, with SMS fallback if you don't use a smartphone.
• To create your Redki account automatically when you first order or book through WhatsApp, so everything appears in one place.
• To issue receipts, warranty PDFs and diagnostic reports by email.
• To improve the service, using aggregated, de-identified analytics.

WhatsApp messages: we only message you about things you asked for (orders, repairs, quotes). Marketing messages are sent only with your opt-in and you can reply STOP at any time.

We share the minimum needed to serve you:

• Service partners who stock, pack or repair devices on Redki's behalf. They receive order and device details, never your full message history, and act under contract as processors.
• Delivery riders & couriers: your name, address and phone number, for delivery only.
• Payment provider (Safaricom M-Pesa): to confirm your payments.
• Diagnostics platform: device identifiers needed to generate your diagnostic report.

We do not sell your personal data. Ever.

Order, repair and warranty records are kept for the life of the warranty plus [X years] for audit and dispute purposes. Message history is kept for [X months]. You can ask us to delete your account data earlier (section 6), except records we must keep by law.

Under the Kenya Data Protection Act, 2019 you can:

• Ask what data we hold about you, and get a copy.
• Correct data that's wrong or outdated.
• Ask us to delete data we don't need to keep.
• Object to marketing at any time.

To exercise any of these, message us on WhatsApp or email [privacy@redki.ke]. We respond within [X days]. You can also complain to the Office of the Data Protection Commissioner.

redki.ke uses a small number of cookies: essential ones that keep your cart working, and analytics cookies that help us see which pages are useful. You can decline non-essential cookies in the banner and clear them anytime in your browser settings.

When we make meaningful changes we'll update the date at the top and, for significant changes, tell you on WhatsApp or by email before they take effect. Old versions are archived and available on request.

Data questions go to our Data Protection Officer: [DPO name], [privacy@redki.ke], [phone].