Privacy Policy

AlcoMart (“we”, “us”) runs the AlcoMart website and Android app. For anything about your data, contact us at support@alcomart.co.ke.

Everyone with an account: your name, email address, phone number, date of birth (to confirm you are 18 or older) and password (stored encrypted, never readable by us).

Customers:

• delivery addresses and the location you pin on the map;
• your orders, ratings and any disputes;
• M-Pesa payment references (we never see your M-Pesa PIN).

Riders:

• your national ID number, date of birth, photos of your ID, a selfie, your certificate of good conduct and, for motorbikes, your licence, insurance, logbook and vehicle photo;
• your M-Pesa payout number;
• your live location while you are online, including when the app is in the background or your screen is locked. A notification shows whenever location is being shared, and it stops when you go offline.

Stores:

• business name, address and location, business permit, liquor licence and KRA PIN;
• payout details, your catalogue, stock, and orders and counter (POS) sales.

Your device: a notification token so we can send order updates, the app version, and basic information your browser sends (device type, approximate country).

How the site is used: pages visited and searches made, linked to a random visitor ID stored on your device. We use this to improve AlcoMart and delete it after 90 days. We don't use advertising trackers.

• To take, pay for and deliver your orders, and to show you where your rider is.
• To check that customers are 18 or older, and that riders and stores are who they say they are and are licensed (Alcoholic Drinks Control Act).
• To pay stores and riders, issue receipts and keep tax records (including KRA eTIMS).
• To send order updates by notification, SMS and email.
• To prevent fraud, resolve disputes and keep the service secure.
• To improve AlcoMart, using usage figures.

We rely on: performing our contract with you, our legal obligations, our legitimate interest in running a safe service, and your consent for location sharing and notifications, which you can withdraw in your phone's settings.

• The store and rider handling your order: the items, your first name, phone number and delivery location.
• Customers: your rider's first name and live location while they deliver their order.
• Service providers that run AlcoMart for us:
  • Safaricom (M-Pesa payments);
  • Africa's Talking (SMS);
  • Supabase (database and storage);
  • Vercel (hosting);
  • Cloudinary (product images);
  • Google Firebase (app notifications);
  • MapTiler and OpenRouteService (maps and routes).
• Authorities: when the law requires it, for example the Kenya Revenue Authority or the police.

We do not sell your personal data.

Some of these providers store data outside Kenya, for example in the European Union and the United States. We use providers that protect it to a standard at least as high as Kenyan law requires.

• Account details: until you delete your account.
• Orders, payments, payouts and receipts: at least 5 years, as Kenyan tax law requires. If you delete your account they stay, but no longer carry your name or contact details.
• Rider documents: until the rider account is deleted, unless we must keep them for an open investigation.
• Usage figures: 90 days.

Under the Data Protection Act you can ask to:

• see the data we hold about you;
• correct it;
• delete it;
• object to or restrict how we use it;
• receive a copy in a portable format.

You can delete your account yourself in the app (see how to delete your account). For anything else, email support@alcomart.co.ke.

If you're unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (ODPC): odpc.go.ke.

AlcoMart is only for people aged 18 and over. We don't knowingly collect data from anyone younger, and we close accounts we find belong to someone under 18.

Data travels encrypted (HTTPS), passwords are hashed, and access to personal data is limited to the people who need it. Rider documents are stored privately, and only AlcoMart reviewers can open them.

If we change this policy, we'll update the date at the top and tell you in the app for important changes.