Privacy Policy for Gooseberry Delight Limited (Kenya – Data Protection Act, 2019) {Updated February 2026}

Gooseberry Delight Limited respects your privacy and is committed to handling your personal data lawfully, fairly, and transparently in accordance with the Data Protection Act, 2019 (No. 24 of 2019) of Kenya. This policy explains what data we collect, why we collect it, how we use it, and the rights you have over your personal information.

1. Data Controller

Gooseberry Delight Limited is a data controller under the Data Protection Act, 2019 (No. 24 of 2019). We determine how and why your personal data is processed when you use our website and services.

2. What Data We Collect

We may collect personal data such as:

  • Name, email address, phone number, and postal/delivery address

  • Payment and transaction details (e.g., payment confirmation references and order totals)

  • Cookies and online identifiers (e.g., IP address, browser type, device information, and website activity)

3. Lawful Basis & Consent

We process personal data only where we have a lawful basis to do so. Where required, we process your data based on your express consent that is clear, informed, and unambiguous, in compliance with the Act. You may withdraw your consent at any time (see “Your Rights” below).

4. Use of Data

We use your data to:

  • Process orders and payments

  • Send order updates and delivery communications

  • Improve website experience and customer service

  • Send marketing communications (only where you have provided opt-in consent)

5. Data Minimization & Security

We retain personal data only for as long as necessary for the purpose for which it was collected, including legitimate business needs and legal obligations where applicable.

We implement appropriate technical and organizational safeguards to protect your data and apply privacy-by-design principles to reduce risks of unauthorized access, loss, or misuse.

6. Third-Party Sharing

Your data may be shared with trusted service providers only where necessary, such as:

  • Couriers and delivery partners (to deliver your order)

  • Payment gateways/processors (to process payments securely)

  • Website hosting/security providers (to keep our website reliable and protected)

We only share data for required purposes and expect service providers to handle it responsibly.

7. International Transfer

We do not transfer personal data outside Kenya unless adequate protections are in place, including appropriate safeguards and compliance measures as required by law.

8. Your Rights

Under Kenyan law, you have the right to:

  • Access your personal data

  • Correct or update inaccurate data

  • Withdraw consent where processing is based on consent

  • Request deletion of your personal data (where legally applicable)

To exercise any of these rights, contact us using the details below.

9. Cookies

Our website uses cookies to enhance your browsing experience and improve functionality. You may disable cookies through your browser settings, but some site features may not function properly.

Contact Information

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us:

Email: gooseberrydelight@gmail.com
Website: https://gooseberrydelight.co.ke