Privacy Policy
What we collect when you shop with us, why we need it, and the control you have over it.
This policy explains how Dynapharm Kenya handles personal data collected through https://dynapharm.co.ke. We keep it deliberately short and specific: it describes what this website actually does, not a generic template. We are the data controller for that information.
The data controller is Dynapharm Kenya, of Sanlam House, 3rd Floor, Nairobi 00200, Kenya. You can reach us at Admin@dynapharm.co.ke or +254725660564 with any question about this policy or about your data.
1. Information we collect
When you place an order, we collect:
- Your name — so we know who the order is for.
- Email address — for your order confirmation and receipt.
- Phone number — so the courier can reach you, and so we can send M-Pesa payment requests.
- Delivery location — the town or area your order is going to.
- Order details — the items, quantities and the total you paid.
- Anything you write to us — notes on an order, or messages you send us on WhatsApp, by email or through the contact form.
If you enter your email into our offers pop-up or newsletter sign-up, we also store that address and the products that were in your basket at the time, so we can send you the discount code and catalogue you asked for.
We never see or store your full payment card details. Card payments are handled entirely by PayPal, and M-Pesa payments by Safaricom through our payment gateway. What we receive back is a confirmation and a transaction reference — not your credentials or PIN.
2. Cookies and similar technologies
- A session cookie — this is what keeps your basket together as you move
between pages. It is essential; without it the shop cannot work. It is set with the
HttpOnly,SecureandSameSite=Strictflags. - Google Analytics — we use it to see which pages and products people look at, in aggregate. Google sets its own cookies for this.
- A first-party visitor counter — our own server records the page you viewed, the page that referred you, and a coarse location, so we can see which pages are working.
- Browser storage — we use your browser's local storage for two small things: remembering that you have already dismissed our offers pop-up, and that you have dismissed the "install our app" prompt. Neither is shared with anyone.
You can block or clear cookies in your browser settings. Blocking the session cookie will stop the basket from working, but the rest of the site will still be readable.
3. Why we use it
- To take payment and fulfil your order — the core of the contract between us.
- To deliver your parcel, which means passing your name, phone number and location to the courier.
- To answer your questions and handle returns or refunds.
- To send you the discount code, catalogue or offers you asked for.
- To keep the site secure, spot fraudulent orders and prevent abuse.
- To understand, in aggregate, which products and pages people find useful.
4. Who we share it with
We share the minimum necessary, and only with:
- Payment providers — PayPal, and Safaricom / our M-Pesa gateway, to process your payment.
- Delivery partners — the courier carrying your parcel (for example Bolt, Posta Kenya EMS or DHL), who need your name, phone number and address.
- Our email and hosting providers — who transmit order confirmations and host this website.
We do not sell your personal data, and we do not pass it to advertisers.
5. How long we keep it
We keep order records for as long as we need them for accounting, tax and warranty purposes, and to honour the returns policy. Marketing email addresses are kept until you unsubscribe or ask us to remove you. Aggregate analytics data does not identify you and is kept for longer.
6. Keeping it safe
The site is served over HTTPS, payment credentials never reach our servers, and access to order data is limited to the people who need it to run the shop. No system is perfect, but we take these measures seriously and will tell you promptly if a breach ever affects you.
7. Your rights
Under the Kenya Data Protection Act 2019 you have the right to:
- Ask what personal data we hold about you, and get a copy of it.
- Have inaccurate information corrected.
- Ask us to delete information we no longer have a good reason to keep.
- Object to, or ask us to restrict, certain processing — including marketing.
- Withdraw consent for marketing at any time. Every marketing email has an unsubscribe link.
- Complain to the Office of the Data Protection Commissioner (ODPC) if you are unhappy with how we have handled your data.
To exercise any of these, contact us using the details below. We may need to confirm your identity before we act, to make sure we do not hand your data to someone else.
8. Children
This shop is intended for adults. We do not knowingly collect personal data from children. If a child has given us their details, contact us and we will remove them.
9. Changes to this policy
If we change how we handle your data we will update this page. The current version always applies from the moment you use the site.
10. Contact us
Questions about your data, or a request under the rights above? Reach us on WhatsApp, call 254725660564, email Admin@dynapharm.co.ke, or use the contact page.
