Privacy notice
Last updated
Daily Soqo Limited (“Soqo”, “we”) is the data controller for the personal data described here. We follow the Data Protection Act, 2019 of Kenya.
1. What we collect
| Data | When | Why |
|---|---|---|
| Name and phone number | When you order | To deliver your order, call you on arrival, and send the M-Pesa prompt |
| Delivery address, landmark and notes | When you order | To deliver your order |
| Location pin (optional) | Only if you tap “Use my location” | To find your address and estimate the delivery time |
| Order details (items, prices, payment method, status) | When you order | To fulfil, account for and support your order |
| M-Pesa payment reference | When you pay with M-Pesa | To confirm payment and issue refunds. We never see or store your M-Pesa PIN |
| Notification subscription (optional) | Only if you turn on order notifications | To tell you when your order is on its way |
We do not collect more than we need, and we do not sell your data.
2. Legal basis
- Performing our contract with you: taking, delivering and supporting your order.
- Legal obligation: keeping financial and tax records.
- Consent: your location pin, notifications and saving your details on your device. You can withdraw consent at any time.
3. Stored on your device
To make reordering quick, the site keeps some data in your browser on this device only: your cart, your recent orders, and — only if you tick “Remember my details” — your name, phone and address. We do not use advertising or tracking cookies. To remove this data, untick “Remember my details” at checkout, or clear the site data in your browser settings.
4. Who we share it with
- Our riders, who see your name, phone, address and order so they can deliver it.
- Safaricom (M-Pesa), to process payments and refunds.
- Service providers that host our website and systems, under contracts that require them to protect your data.
- Authorities, where the law requires it.
Some providers may store data outside Kenya. When they do, we make sure appropriate safeguards are in place, as the Act requires.
5. How long we keep it
We keep order records, including your name, phone number and address, for 7 years to meet tax and accounting obligations, then delete or anonymise them. Location pins and notification subscriptions are deleted once the order is complete.
6. Your rights
Under the Data Protection Act, 2019 you have the right to:
- be told how your data is used (this notice);
- access the personal data we hold about you;
- correct data that is wrong or incomplete;
- have data deleted where we no longer need it or have no lawful reason to keep it;
- object to processing, and withdraw consent at any time;
- receive your data in a portable format.
To use any of these rights, email [email protected] or WhatsApp +254 141 084 186. We will reply within the time the law allows. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
7. Security
We use encrypted connections (HTTPS), restrict access to people who need it, and protect each order with a private code that is stored only on the device that placed it.
8. Changes
We will update this notice when our practices change and show the date of the latest change at the top of this page.