Privacy Policy

onlineduka.shop (“we”, “our”, “us”) is operated by Emen Engineering Limited, a company registered in Kenya. This policy explains how we collect, use, store, and protect personal information across our platform, in line with the Kenya Data Protection Act (2019) and applicable international standards.

1. What we collect

• Account information (name, email, phone, business details)
• Transaction data (orders, payments via M-Pesa and partners)
• Usage data (pages visited, features used) for analytics and product improvement
• Communications you send us (support, feedback)

2. How we use it

To operate the platform, process payments, prevent fraud, improve our services, and (with your consent) send you updates about new features and partner offers.

3. Your rights

You have the right to access, correct, port, or delete your personal data, and to object to processing or withdraw consent at any time. Email privacy@onlineduka.shop to exercise these rights. We respond within 7 business days.

4. Data storage & security

Data is stored on secure infrastructure (encrypted at rest with AES-256, in transit with TLS 1.3). Sensitive financial data is processed by PCI-DSS compliant payment partners — we never store your M-Pesa PIN or full card numbers.

5. Contact

Questions? Email privacy@onlineduka.shop or write to Emen Engineering Limited, Nairobi, Kenya.