Privacy Policy

Sweech Website Privacy Notice

Effective date: 26 January 2026
Last updated: 26 January 2026
Version: 2.0

1. Introduction

This Privacy Notice explains how Sweech Limited (‘Sweech’, ‘we’, ‘us’) collects, uses, shares, and protects personal data when you visit our website, shop online, or visit our physical store as a customer. We are the Data Controller for this information.

2. Who This Notice Applies To

  • Website visitors and browsers.
  • Online customers (registered account holders and guest checkout).
  • Walk-in retail customers.
  • Individuals who subscribe to our newsletters or marketing.

3. Personal Data We Collect

  • Identity Data: Name, username, or similar identifier.
  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
  • Technical Data: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
  • Profile Data: Your username and password (hashed), purchases or orders made by you, your interests, preferences, feedback and survey responses.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

4. How We Collect Your Data

  • Direct interactions: You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise.
  • Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns (via cookies).
  • Third parties: We may receive personal data about you from various third parties such as analytics providers (e.g., Google Analytics) and payment providers.

5. How We Use Your Data (Legal Basis)

  • To register you as a new customer (Performance of Contract).
  • To process and deliver your order including managing payments, fees and charges, and collecting and recovering money owed to us (Performance of Contract).
  • To manage our relationship with you which will include notifying you about changes to our terms or privacy policy and asking you to leave a review or take a survey (Performance of Contract, Legitimate Interests).
  • To enable you to partake in a prize draw, competition or complete a survey (Performance of Contract, Legitimate Interests).
  • To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (Legitimate Interests, Legal Obligation).
  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you (Legitimate Interests).
  • To use data analytics to improve our website, products/services, marketing, customer relationships and experiences (Legitimate Interests).

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for seven years after they cease being customers for tax purposes.

7. Data Sharing

  • Service providers acting as processors who provide IT and system administration services.
  • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers.
  • Revenue Authority (KRA), regulators and other authorities acting as processors or joint controllers who require reporting of processing activities in certain circumstances.
  • Logistics and delivery partners to fulfill your orders.

8. International Transfers

We ensure your personal data is protected by requiring all our group companies to follow the same rules when processing your personal data. Whenever we transfer your personal data out of Kenya, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data; or we use specific contracts approved for use in Kenya which give personal data the same protection it has in Kenya.

9. Your Legal Rights

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

10. Contact Details

If you have any questions about this privacy notice or our privacy practices, please contact our Data Protection Officer at: hello@sweech.co.ke or visit us at Westlands, Nairobi.