TouchGift — Send a gift in Kenya

1. Who We Are

TouchGift ("we," "us," or "our") is an online gifting platform operated in Kenya. We enable customers to purchase gifts — flowers, hampers, personalized items, and gift experiences — and have them delivered to recipients across Kenya. Our website is located at touchgift.co.ke.

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy policy or our practices, please contact us at +254 142 677 898 or email info@touchgiftshop.co.ke.

2. Information We Collect

We collect information to provide and improve our gifting services. The types of data we collect include:

a) Information You Provide

Account information: Name, phone number, and email when you create an account
Order information: Sender name, sender phone, recipient name, recipient phone, delivery address/landmark, and gift notes
Payment information: Phone number for M-Pesa transactions (processed by PesaPal — we do not store your M-Pesa PIN or card details)
Wishlist data: Items you add to wishlists and any associated notes
Pool contributions: Name and phone number when you contribute to a group gift pool
Communications: Any messages you send us via WhatsApp, email, or our AI Gift Finder

b) Information Collected Automatically

Device information: Browser type, operating system, device type, and screen resolution
Usage data: Pages visited, time spent on pages, products viewed, and navigation patterns
Location data: Approximate location based on IP address (used for delivery zone estimation)
Cookies: Session cookies to keep you logged in and remember your preferences

c) Information from Third Parties

Payment confirmation: Transaction status and receipt numbers from PesaPal
Delivery data: GPS coordinates when a recipient drops their delivery pin

3. How We Use Your Information

We use the information we collect to:

Process and fulfill your gift orders, including delivery to recipients
Send order confirmations, status updates, and delivery notifications
Process payments securely through PesaPal
Send pin drop links to recipients so they can set their delivery location
Send tracking links so recipients can follow their gift status
Provide AI-powered gift recommendations through our Gift Finder (T-Gifter)
Generate handwritten note content using AI services
Communicate with you about orders, support requests, and account issues
Send reminders about upcoming occasions you've saved (if you opt in)
Improve our website, services, and user experience
Detect and prevent fraud, abuse, and security issues
Comply with legal obligations under Kenyan law

4. How We Share Your Information

We do not sell your personal data. We share information only in these limited circumstances:

Payment processing: We share transaction details with PesaPal to process your M-Pesa, card, or Airtel Money payments. PesaPal's own privacy policy governs their use of this data.
Delivery partners: We share the recipient's name, delivery landmark/pin location, and contact phone number with our delivery partners solely to complete the delivery.
AI services: When you use the Gift Finder or note generator, your queries may be processed by third-party AI providers (OpenAI, Google, xAI) to generate responses. We do not share your personal account data with these providers — only the query text.
Legal requirements: We may disclose information if required by law, court order, or governmental authority in Kenya.

5. Recipient Data

A key part of our service involves collecting information about gift recipients who may not have directly interacted with TouchGift. This includes:

Recipient name and phone number (provided by the sender)
Delivery location and GPS coordinates (provided by the recipient via pin drop)
Preferred delivery time window
Gift notes from the sender

We process this data solely to fulfill the gift delivery. Recipients receive only the information necessary to set their delivery location and track their gift. Recipients do not see the sender's identity or gift price when Anonymous Mode is enabled.

6. Data Security

We implement appropriate security measures to protect your personal information:

All data is encrypted in transit using TLS/SSL
Payment processing is handled entirely by PesaPal — we never store M-Pesa PINs, card numbers, or CVV codes
Database access is restricted to authorized personnel only
API keys and secrets are stored server-side and never exposed to the browser
Regular security reviews of our codebase and infrastructure

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our services:

Account data: Retained until you request account deletion
Order data: Retained for 24 months for order history, support, and legal compliance
Payment references: Transaction IDs retained for 7 years as required by Kenyan tax law
Delivery pins: GPS coordinates retained for 6 months for delivery dispute resolution
AI chat logs: Retained for 30 days to improve our Gift Finder, then anonymized

8. Your Rights

Under Kenya's Data Protection Act (2019), you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Delete your personal data (subject to legal retention requirements)
Object to processing of your data for marketing purposes
Withdraw consent at any time where we rely on consent to process your data
Data portability — request a copy of your data in a machine-readable format

To exercise any of these rights, contact us at info@touchgiftshop.co.ke.

9. Cookies

We use the following types of cookies:

Essential cookies: Required for the site to function (session management, login state)
Preference cookies: Remember your settings (language, currency display)
Analytics cookies: Help us understand how visitors use our site (anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

10. Children's Privacy

TouchGift is not intended for use by children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of TouchGift after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this privacy policy or our data practices, contact us:

Privacy Policy