Privacy Policy
Website: shopstarglow.com
Business: Shop Star Glow
Country: Kenya
Effective Date: 01/01/2026
- Introduction
Shop Star Glow (“we”, “us”, “our” or “Shop Star Glow”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, protect and disclose personal information when you visit or use shopstarglow.com, place an order, contact us, or otherwise interact with our services.
This Privacy Policy is intended to comply with applicable data protection requirements in Kenya, including the Data Protection Act, 2019 and applicable regulations issued under the Act. The Act requires personal data to be processed lawfully, fairly and transparently, for specific legitimate purposes, and only to the extent necessary for those purposes.
- Information We Collect
Depending on how you interact with our website, we may collect information such as:
Personal and Contact Information
- Full name
- Telephone number
- Email address
- Delivery address
- Billing information
- Other information you voluntarily provide when contacting us
Order Information
When you place an order, we may collect information necessary to process and fulfil your purchase, including:
- Products ordered
- Order value
- Delivery information
- Order history
- Payment-related information necessary to confirm and process your transaction
Communications
If you contact us by email, telephone, contact form or another available communication channel, we may retain information relating to your communication so that we can respond to your enquiry and provide customer support.
Website Usage Information
Depending on the technologies and services enabled on the website, we may collect technical or usage information such as IP address, browser type, device information, pages visited, and general website activity.
- How We Use Your Personal Information
We may use your personal information to:
- Process and fulfil your orders.
- Confirm payments and transactions.
- Arrange delivery of purchased products.
- Communicate with you regarding your order.
- Respond to enquiries and provide customer support.
- Process eligible returns, exchanges and refunds.
- Maintain records of transactions.
- Improve our website, products and services.
- Protect our website, customers and business against fraud, misuse or unlawful activity.
- Comply with applicable legal and regulatory obligations.
- Send marketing communications where you have provided the required consent or where otherwise permitted by applicable law.
We will not use personal information for purposes that are incompatible with the purpose for which it was collected, except where permitted or required by applicable law.
- Lawful Basis for Processing
Under the Kenya Data Protection Act, personal data may be processed where the data subject has consented or where processing is necessary for purposes recognised by law, including performing a contract, complying with a legal obligation, protecting vital interests, or pursuing legitimate interests where applicable.
Depending on the circumstances, Shop Star Glow may process personal information on the basis of:
- Your consent.
- The need to perform or take steps in relation to a contract, including fulfilling an order.
- Compliance with a legal obligation.
- Legitimate interests, where applicable and where those interests do not override your rights and freedoms.
- Other lawful grounds permitted under Kenyan law.
Where processing is based on consent, you may withdraw your consent subject to applicable legal limitations. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Information Required to Place an Order
Certain personal information may be necessary to process and deliver an order.
If you do not provide information that is necessary for processing an order, we may be unable to accept, process or deliver that order.
The Kenya Data Protection Act requires individuals to be informed about whether requested information is voluntary or mandatory and the consequences of failing to provide information where applicable.
- Sharing Your Personal Information
We may share relevant personal information with service providers where necessary to operate our business and provide services to you.
These may include, where applicable:
- Payment service providers.
- Delivery and courier providers.
- Website hosting and technical service providers.
- Website security and maintenance providers.
- Professional advisers.
- Government, regulatory or law-enforcement authorities where disclosure is required or permitted by law.
We will only share information where there is an appropriate lawful basis for doing so and, where applicable, appropriate safeguards are in place.
The Kenya Data Protection Act requires transparency concerning third parties to whom personal data is transferred and the safeguards adopted.
- Payment Information
Payments may be made using payment methods made available by Shop Star Glow, including M-Pesa or Cash, where applicable.
Where payment services are provided through a third-party payment provider, that provider may process information necessary to complete the transaction under its own privacy terms and applicable legal requirements.
Shop Star Glow does not require customers to provide payment information through channels that are not officially designated for payment.
- Cookies and Similar Technologies
Our website may use cookies and similar technologies to support website functionality, security, performance and user experience.
Cookies may help us understand how visitors use the website and improve the services we provide.
Where cookies or similar technologies involve processing that requires consent under applicable law, we will seek the appropriate consent.
Website owner note: Before publishing this policy, confirm which cookies, analytics tools, advertising tools and other tracking technologies are actually installed on the website and update this section accordingly.
- Marketing Communications
Where we send promotional or marketing communications, we will do so in accordance with applicable data protection requirements.
Where consent is required, we will obtain appropriate consent before sending marketing communications.
You may request that we stop sending marketing communications at any time by using the available unsubscribe mechanism or by contacting us directly.
- Data Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.
These measures may include appropriate access controls, secure account management, website security measures, backups and other safeguards appropriate to the nature of the information processed.
The Kenya Data Protection Act requires controllers and processors to maintain the integrity and confidentiality of personal data and to implement appropriate protection measures.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
- Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, maintaining business records, resolving disputes, preventing fraud and complying with legal obligations.
Where personal information is no longer required and there is no lawful reason to retain it, it should be deleted, anonymised or otherwise securely disposed of in accordance with applicable requirements.
The Kenya Data Protection Act provides that personal data should not be retained in an identifiable form for longer than necessary for the purpose for which it was collected.
- Your Data Protection Rights
Subject to applicable law and any lawful limitations, you have rights regarding your personal information.
These include the right:
- To be informed about the use of your personal information.
- To request access to personal information held about you.
- To object to the processing of all or part of your personal information.
- To request correction of false or misleading information.
- To request deletion of false or misleading information.
- To exercise other rights provided under applicable Kenyan data protection law.
These rights are recognised under section 26 of the Kenya Data Protection Act, 2019.
To exercise a privacy or data protection right, please contact us using the details provided below. We may need to verify your identity before processing certain requests.
- International Transfers
Where personal information is transferred outside Kenya, we will take the measures required by applicable Kenyan data protection law.
The Kenya Data Protection Act places requirements on transfers of personal data outside Kenya, including requirements relating to adequate safeguards or consent in applicable circumstances.
Website owner note: Confirm the countries in which Shop Star Glow’s hosting provider, payment providers, email provider, analytics services and other processors store or process personal information before publishing the final version.
- Children’s Personal Information
Our website is not intended to knowingly collect personal information from children without the appropriate consent and safeguards required by law.
Where personal information relating to a child is processed, applicable requirements concerning parental or guardian consent and the best interests of the child will apply.
- Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content or security of third-party websites. Customers should review the privacy policies of third-party websites before providing them with personal information.
- Data Breaches
If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the breach and make any notifications required by applicable law.
- Complaints
If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can investigate and address your concern.
You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) where applicable. The ODPC provides a mechanism for data subjects to lodge complaints concerning alleged infringements of their data protection rights.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or data processing practices.
Any updated version will be published on this page with an updated effective date.
We encourage you to review this Privacy Policy periodically.
- Contact Us
If you have questions, concerns or requests relating to this Privacy Policy or your personal information, please contact us:
Shop Star Glow
Address: The Bazaar Plaza, Moi Avenue, Nairobi, Kenya
Phone: +254 728 618 543
Email: sales@shopstarglow.com
Website: shopstarglow.com
- Effective Date
Effective Date: 01/01/2026
This Privacy Policy applies to personal information processed through shopstarglow.com from the effective date stated above.