Privacy policy
Last updated
This policy explains what personal data Jaba Juice by Naturaw collects when you use jabajuice.co.keor order through our WhatsApp number, why we collect it, and what you can ask us to do with it. It is written to meet our obligations under Kenya's Data Protection Act, 2019.
What we collect and why
- Your name and phone number
- So the rider can find you and call if they cannot. The phone number is also how anonymous orders are matched back to you.
- Your delivery location
- Either GPS coordinates you share or an area you pick from a list, used to find the nearest store and work out the delivery fee.
- Your email address
- If you sign in with Google or subscribe to the newsletter. Used to identify your account and, if you subscribed, to send offers.
- Your order history
- What you bought, when, from which store, what you paid and any promo code or points used.
- Reviews you write
- Your display name, rating and review text are published on the product page for everyone to see.
- Notification permissions
- If you allow push notifications, we store the browser's subscription details so we can tell you when your order moves.
- Usage statistics
- Google Analytics records pages visited and roughly where visitors come from, so we can see what is working.
We do not collect more than we need to take an order, deliver it and let you see it afterwards. We never see or store your M-Pesa PIN, and we do not store card details because we do not take card payments.
Why we are allowed to hold it
- To perform a contract. We cannot deliver an order without a name, a phone number and a location.
- With your consent. Newsletter emails, push notifications and WhatsApp updates are only sent if you opt in, and you can withdraw at any time.
- Legitimate interest. Keeping the site working, preventing fraudulent orders, and understanding which pages people use.
- Legal obligation. Keeping records of sales for tax and accounting.
Who else sees your data
We do not sell your personal data, and we never will. We share it only with the companies that make the service work:
| Company | What for | Where |
|---|---|---|
| Safaricom (M-Pesa) | Taking payment. Your phone number and the amount are sent to process the STK push. | Kenya |
| Sign-in with Google, and Google Analytics for anonymous usage statistics. Google Fonts serves the site's typefaces. | United States and elsewhere | |
| Meta (WhatsApp) | Sending your order to the store that will fulfil it, and handling orders placed through our WhatsApp number. | United States and elsewhere |
| Telegram | An alternative channel for alerting store staff to a new order. | Outside Kenya |
| Vercel | Hosting the website and serving it to your browser. | United States |
| Supabase | The database where accounts, orders and reviews are stored. | European Union |
The store that fulfils your order is sent your name, phone number and delivery location so the rider can reach you. Nothing else.
Data leaving Kenya
Our website is hosted in the United States and our database is in the European Union, so your data is stored outside Kenya. The Data Protection Act allows this where the receiving country or provider offers adequate protection, and we rely on the contractual safeguards our providers offer. If you would rather not have your data stored abroad, we cannot offer you the online service — you can still order by phone.
How long we keep it
- Order records: seven years, because tax law requires it.
- Your account: until you ask us to delete it.
- Newsletter subscription: until you unsubscribe.
- Reviews: until you ask us to remove them.
- Analytics: up to 14 months, then deleted by Google automatically.
Cookies and tracking
We use cookies to keep you signed in and to remember your cart — the site does not work without these. Google Analytics also sets cookies to count visits and see which pages are used. You can block or delete cookies in your browser settings; blocking the essential ones will stop sign-in and checkout from working.
Your confirmation that you are over 18 is stored on your own device, not on our servers.
Your rights
Under the Data Protection Act, 2019 you can ask us to:
- Tell you what data we hold about you, and give you a copy
- Correct anything that is wrong
- Delete your data, where we are not required to keep it
- Stop using it for marketing
- Withdraw a consent you gave earlier
Email hello@jabajuice.co.ke or call +254 711 515 636. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner of Kenya.
Children
Jaba Juice contains khat (miraa) and is sold to adults only. This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.
Changes to this policy
If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will be announced on the site.
See also our terms of service.