Privacy Policy

Who we are

Meed Collections ("we") runs the online marketplace at www.meedcollections.store. We act as the data controller for the personal data described here and handle it in line with the Kenya Data Protection Act, 2019.

What we collect

Account data: name, email address, phone number and a password (stored only as a one-way hash). If you use Continue with Google, we receive your name, email address and profile picture from Google. We never see your Google password.

Order data: delivery address, items ordered, order totals and payment status.

Seller data: for people applying to sell, the business name, registration number, KRA PIN, business type, location and the documents you upload for verification.

Activity data: products you save to your wishlist and products you view, used to give you recommendations.

Technical data: cookies needed to keep you signed in and secure (see our Cookie Policy).

Payments

Payments are processed by IntaSend (M-Pesa and card). We do not see or store your card number or M-Pesa PIN. We keep only the payment reference and status.

How we use it

To create and secure your account, process and deliver orders, send order and account emails, review seller applications, personalise recommendations, prevent fraud and meet legal obligations.

Who we share it with

Sellers receive only what they need to fulfil an order (your name, delivery details and the items they sold).

Service providers that run the platform: Vercel (hosting), MongoDB (database), UploadThing (file storage), Resend (email), IntaSend (payments) and Google (sign-in).

We do not sell your personal data.

Who can see your data

Your account, orders, wishlist and viewing history are visible only to you and to authorised Meed staff. Sellers see only orders that include their own products. Seller verification documents are visible only to the seller and Meed staff.

How long we keep it

We keep account and order data while your account is active and for as long as the law requires for tax and accounting records. Seller documents are kept while the seller account exists.

Your rights

You may ask to see, correct or delete your personal data, object to its use, or withdraw consent at any time. You can edit your details in your account profile. For other requests, contact us through the Support page and we will respond within a reasonable time. You may also complain to the Office of the Data Protection Commissioner of Kenya.

Security

We use encrypted connections (HTTPS), hashed passwords, role-based access controls and signed sessions. No system is perfectly secure, so please use a strong, unique password.

Children

Our service is not meant for children under 18.

Changes

We may update this policy. The date at the top shows the latest version.