Privacy Policy

Who we are

House of Wura Ltd (“House of Wura”, “we”) is the data controller for the personal data described here. Our registered office is Kiamumbi Building, Kigali Street, Kahawa, Ruiru, Kiambu County, Kenya, and our postal address is P.O. Box 65801–00607, Kamiti, Kenya. You can reach us at sales@houseofwura.com.

This policy is written to meet our obligations under Kenya's Data Protection Act, 2019.

What we collect

When you place an order: your name, email address, phone number, and shipping address. Your payment is completed on our payment provider's own secure page — we never see or store your card number, PIN or M-Pesa credentials. We receive only a payment reference, the amount, and whether it succeeded.

When you create an account: your email address and a password, which is stored only in hashed form.

When you contact us or join our mailing list: your name and email address, and whatever you choose to write to us.

Automatically: basic technical data such as your IP address and browser type, recorded by our hosting provider in its server logs for security and reliability.

Through Google Analytics, if you accept analytics cookies: which pages you visit, how you arrived (for example from a search or a social link), your approximate location, and your device and browser type. We use this in aggregate to understand how the shop is used and improve it.

Why we use it, and on what basis

To take, fulfil and deliver your order, and to answer you when you get in touch — this is necessary to perform our contract with you.

To send marketing emails about new collections and previews — only where you have given consent, which you can withdraw at any time using the unsubscribe link in any email.

To keep the site secure, prevent fraud, and meet our tax and accounting obligations — our legitimate interests and our legal obligations.

We do not sell your personal data, and we do not use it to make automated decisions about you.

Who we share it with

We share your data only with the service providers who help us run the shop, and only as far as each needs it: Paystack (payment processing), Supabase (our database and account logins), Vercel (website hosting), Resend (order, account and marketing email), and Google (Google Analytics, site statistics).

We also share your name, address and phone number with the courier delivering your order.

We may disclose data where the law requires it, or to establish or defend a legal claim.

Where your data is stored

Our database and email providers store data on servers in the European Union, so your personal data is transferred outside Kenya. We rely on these providers' contractual data-protection commitments to keep your data protected to the standard required by the Data Protection Act. Payment data is processed by Paystack under its own terms.

How long we keep it

Order and transaction records: seven years, to meet Kenyan tax and accounting requirements.

Account details: for as long as your account is open. Close it and we delete or anonymise it.

Mailing-list details: until you unsubscribe. Contact-form messages: two years.

Cookies

Essential cookies keep you signed in to your account and keep your shopping bag intact between pages. Blocking them in your browser will stop sign-in and checkout from working.

Analytics cookies are set by Google Analytics, and only if you accept them in the cookie notice. They count visits and show how the shop is used; they don't identify you by name, and we don't use them for advertising. If you decline, Google Analytics receives only anonymous, cookieless signals. You can change your choice at any time with “Cookie settings” at the bottom of every page, and declining doesn't affect the shop.

Your rights

You have the right to be informed about how your data is used, to access a copy of it, to have inaccurate data corrected, to have your data deleted, to object to or restrict how we use it, and to receive it in a portable format.

To exercise any of these, email sales@houseofwura.com. We will respond within the timeframe set by the Data Protection Act.

If you believe we have mishandled your data, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at odpc.go.ke.

Changes to this policy

We may update this policy as the shop develops. The date at the top of this page tells you when it last changed. This version is effective from 24 October 2026.