Privacy policy

Skyhat is a data controller for the personal information we collect about shoppers, vendor staff, and drivers under the Kenya Data Protection Act, 2019. This policy explains what we collect and what you can ask us to do with it. Our longer Data protection notice covers the same ground in legal terms.

1. Information we collect

• Account details: name, email, phone number, and the password or sign-in provider you use.
• Order and shopping data: delivery addresses you save, cart contents, checkout messages, quotation (RFQ) requests, and order status updates.
• Business data: for hardware companies, trading name, branch locations, contacts, product lists, and listing payment records.
• Location: branch ranking uses the town or approximate location you set or share in your browser or app. We do not track your movements.
• Technical data: device type, app version, IP address, and basic usage events needed to keep the marketplace working and secure.
• Support data: messages, call notes, and WhatsApp conversations you start with us.

2. Why we use it

To run the marketplace, connect you with the right vendor shop, show branches and stock near you, take listing payments from vendors, prevent abuse, meet tax and record-keeping duties, and respond to support requests.

3. Legal basis

We process your data to perform the contract with you (browsing, ordering, listing), for our legitimate interest in operating and securing a marketplace, for your consent where we ask for it (optional WhatsApp reminders, marketing), and to comply with Kenyan law. You can withdraw optional consent at any time without affecting what we already did lawfully.

4. Who sees your data

The vendor shop you order from or request a quotation from receives the details needed to fulfil that request: your name, phone, delivery address, items, and messages. Skyhat staff and contractors bound by confidentiality operate the platform. Payment providers (for example Pesapal for vendor listing fees) process payment data on their own terms. We do not sell your personal information and we do not hand it to advertisers.

5. International transfers

Some of our infrastructure and messaging providers are outside Kenya. Where data leaves Kenya we require standard contractual safeguards with those processors.

6. How long we keep it

Account and order records are kept while your account is active and afterwards as long as Kenyan tax, accounting, or legal retention rules require. Support threads are kept for up to 24 months. Listing payment records are kept for the period required for financial records.

7. Security

Access is role-based, transport is encrypted with HTTPS, and secrets are kept server-side. No system is perfectly secure, so tell us immediately if you suspect a problem with your account.

8. Your rights

You can ask to access, correct, delete, or restrict your data, object to certain processing, or request a portable copy. Update profile and saved addresses yourself from your account page, or contact us and we will help. You may also complain to the Office of the Data Protection Commissioner (ODPC) if you are not satisfied with our answer.

9. Children

Skyhat is for adults. We do knowingly collect data from children under 18; a shop or delivery contact may still be a young adult employee, which is covered by our Data protection notice.

10. Changes

We will update this policy when the marketplace changes and post the new "last updated" date here.

Questions: [email protected] · 0712010020 / 0181675744 (Kenya).