Privacy Matters

Privacy Policy – Terrah Cakes

Effective Date: April 2026

Welcome to Terrah Cakes (“we,” “our,” or “us”). We are committed to maintaining the trust and confidence of our customers, website visitors, and business partners. We do not sell, rent, or trade personal information, including email lists, with other companies.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Kenya Data Protection Act, 2019.

1. Information We Collect

We may collect and process the following types of information:

* Personal Identification Information

Name, phone number, email address, delivery address, and any details you provide when placing an order or making inquiries.

•Order Information

Details about cake orders, preferences, customizations, and payment-related information (processed securely through third-party providers).

* Non-Identifiable Information

Such as general location (e.g., Ruiru), customer preferences, and interaction history.

* Usage Data

Including IP address, browser type, pages visited, and time spent on our website or social platforms.

* Cookies and Tracking Technologies

Used to enhance user experience and analyze website performance.

* Communication Preferences

Your preferences for receiving updates, promotions, and notifications.

2. How We Use Your Information

We use your information for the following purposes:

* Order Fulfillment

To process and deliver your cake orders and provide customer support.

* Communication

To respond to inquiries, confirm orders, and send updates regarding deliveries or services.

* Service Improvement

To understand customer preferences and improve our products and services.

* Marketing

With your consent, to send promotions, offers, and updates about Terrah Cakes.

* Security

To protect against fraud, unauthorized transactions, and ensure system safety.

* Legal Compliance

To comply with applicable laws and regulatory requirements in Kenya.

3. Legal Basis for Processing

We process your personal data based on:

* Consent– For marketing and promotional communications.

* Contractual Necessity– To fulfill your orders and provide our services.

* Legitimate Interests – To improve our services and ensure business continuity.

* Legal Obligation– To comply with Kenyan laws and regulations.

4. How We Share Your Information

We do not sell your personal data. However, we may share it in the following cases:

* Service Providers

Trusted third parties such as delivery services, payment processors, and IT support providers.

* Business Partners

Where necessary to fulfill collaborative services (e.g., event setups).

* Legal Authorities

When required to comply with legal obligations or protect our rights.

All third parties are required to handle your data securely and in line with this policy.

5. Data Storage and Transfers

Your data is primarily stored within Kenya. If any data is transferred outside Kenya, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

6. Data Retention

We retain your personal information only as long as necessary:

* Order data: retained for record-keeping and legal compliance.

* Marketing data: retained until you opt out or withdraw consent.

When no longer required, your data will be securely deleted or anonymized.

7. Your Data Protection Rights

Under the Kenya Data Protection Act, you have the right to:

* Access your personal data.

* Rectify inaccurate or incomplete data.

* Erase your personal data (where applicable).

* Restrict Processing of your data.

* Object to processing based on legitimate interests.

* Withdraw Consent at any time.

To exercise these rights, please contact us using the details below. We aim to respond within a reasonable timeframe.

8. Cookies and Tracking Technologies

We use cookies to improve your browsing experience and analyze website traffic. You can control cookie settings through your browser.

9. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse.

10. Data Breach Notification

In the event of a data breach, we will notify affected individuals and the Office of the Data Protection Commissioner (Kenya)as required by law

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on our platforms, and significant updates will be communicated where necessary.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how we handle your data, please contact us:

Terrah Cakes

Kenya

Email: terrahcakes@gmail.com

Phone: 0700 595 969

---

Conclusion

At Terrah Cakes, your privacy matters to us. We are committed to protecting your personal information and handling it responsibly and transparently.