Privacy Policy

1. Introduction

House of Booch (“we”, “our”, or “us”) is a Kenyan premium kombucha brand committed to protecting the privacy and personal information of our customers, website visitors, and business partners.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, browse our products, create an account, place an order, make a payment, arrange a delivery, contact us, or communicate with us through WhatsApp Business and other digital platforms.

We handle personal information in accordance with the Kenya Data Protection Act, 2019, applicable regulations, and relevant platform policies.

By using our website or services, you acknowledge this Privacy Policy. Where consent is legally required, we will request it separately.

2. Information We Collect

We collect personal information that is reasonably necessary to operate our website, process orders, provide customer support, and improve our services.

2.1 Personal Information

When you interact with House of Booch, we may collect:

• Full name.
• Email address.
• Telephone number.
• Billing and delivery address.
• Information submitted through contact forms.
• Customer enquiries, feedback, and complaints.
• Marketing preferences and consent records.

2.2 E-commerce and Order Information

When you browse our online store or place an order, we may collect:

• Products viewed, selected, or purchased.
• Shopping cart and checkout information.
• Order numbers and purchase history.
• Delivery instructions and fulfilment details.
• Order confirmations, cancellations, returns, and refund records.
• Customer account information, where account functionality is available.

We use this information to manage your shopping experience, process transactions, fulfil orders, and provide after-sales support.

2.3 Payment Information

House of Booch may offer payment methods such as M-Pesa and other supported payment services.

Depending on the payment method, we may process payment confirmations, transaction references, payment status, amounts paid, and relevant order details.

Payments may be processed by third-party payment providers under their respective terms and privacy policies.

We do not ask you to provide your M-Pesa PIN, banking PIN, or payment card security code through our website or customer support channels.

2.4 WhatsApp Business Information

When you contact House of Booch through WhatsApp Business, we may process:

• Your WhatsApp telephone number and available profile name.
• Messages and enquiries you send us.
• Product interests and order-related information.
• Delivery details and customer support history.
• Communication preferences and marketing consent records.

We use this information to respond to enquiries, assist with purchases, provide order updates, and manage customer relationships.

2.5 Technical and Website Usage Information

When you visit our website, we may automatically collect:

• IP address.
• Browser type and version.
• Device and operating system information.
• Pages visited and time spent on the website.
• Referring website or traffic source.
• Cookie identifiers and website interaction data.

This information helps us maintain website security, analyse performance, and improve the customer experience.

3. How We Collect Information

We collect personal information through:

• Website forms, checkout pages, and customer account registration.
• Online orders and payment transactions.
• Emails, telephone calls, and WhatsApp Business conversations.
• Customer surveys, promotions, and events.
• Cookies and similar website technologies.
• Payment providers, delivery partners, and other service providers, where appropriate and lawful.

We aim to collect information fairly, transparently, and for specific legitimate purposes.

4. How We Use Your Information

House of Booch may use personal information for the following purposes.

4.1 Order Processing and Fulfilment

• Process and confirm customer orders.
• Manage shopping carts and checkout.
• Verify payment status.
• Arrange delivery or collection.
• Send order confirmations and delivery updates.
• Manage cancellations, returns, and refunds.
• Maintain transaction and order records.

4.2 Customer Support

• Respond to questions about our products.
• Provide assistance through email, telephone, and WhatsApp Business.
• Resolve complaints and delivery issues.
• Communicate important service information.

4.3 Marketing and Customer Engagement

Where permitted by law and with consent where required, we may use your information to share:

• Product launches and new flavours.
• Special offers and promotions.
• Brand events and product sampling activities.
• Newsletters and relevant product updates.

You can opt out of marketing communications at any time.

4.4 Website Performance and Business Improvement

We may use website analytics and purchase information to understand customer preferences, assess product demand, improve website functionality, and evaluate marketing performance.

4.5 Security and Legal Compliance

We may process information to detect fraud, prevent unauthorised transactions, protect our website, enforce our terms, resolve disputes, and comply with applicable legal obligations.

5. Legal Basis for Processing

We process personal information under one or more lawful bases recognised by applicable data protection law, including:

• Contractual necessity: To fulfil your order and provide requested services.
• Consent: Where you have agreed to a particular use of your information.
• Legal obligations: To meet applicable statutory, tax, accounting, and regulatory requirements.
• Legitimate interests: To protect our business, improve our services, maintain security, and manage customer relationships, where these interests do not override your rights.

Where consent is required, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. WhatsApp Business and Meta Services

House of Booch may use WhatsApp Business, the WhatsApp Business Platform, Meta services, or authorised technology providers to communicate with customers.

These services may support customer enquiries, product information, order assistance, delivery updates, and other relevant business communications.

We will:

• Use customer information for disclosed and legitimate purposes.
• Obtain the permissions and consent required for the relevant communications.
• Send promotional messages only where permitted by applicable law and platform policies.
• Respect requests to stop receiving marketing messages.
• Apply appropriate safeguards to protect customer information.
• Restrict access to customer communications to authorised personnel and service providers who require access for legitimate purposes.

You may ask us to stop promotional WhatsApp messages by replying “STOP” or contacting us directly.

Stopping promotional messages does not necessarily prevent essential communications relating to an existing order or service.

WhatsApp and Meta may independently process certain information under their own terms and privacy policies. You can review the WhatsApp Privacy Policy for further details.

7. Sharing Your Information

House of Booch does not sell your personal information.

We may share relevant information with trusted third parties where necessary to provide our services, including:

• Payment processors and M-Pesa integration providers.
• Delivery and courier companies.
• Website hosting and cloud infrastructure providers.
• E-commerce and order management service providers.
• WhatsApp Business and Meta service providers.
• Customer support, email, and messaging platforms.
• Website analytics providers.
• Accountants, legal advisers, and other professional service providers.
• Government or regulatory authorities where disclosure is legally required.

We take reasonable steps to ensure that service providers handling personal information are subject to appropriate confidentiality and data protection safeguards.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential functionality, improve browsing, remember preferences, and understand how visitors interact with our online store.

Depending on the website features implemented, cookies may include:

• Essential Cookies: Support core website functionality, security, sessions, shopping carts, and checkout.
• Analytics Cookies: Help us understand website traffic and usage patterns.
• Preference Cookies: Remember settings and preferences.
• Marketing Cookies: Where implemented and permitted, help measure advertising performance or support relevant marketing activities.

Where required by law, we will obtain consent before placing non-essential cookies on your device.

You may manage your cookie preferences through the website’s cookie controls, where available, or through your browser settings. Disabling certain cookies may affect shopping cart, checkout, or other website functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Measures may include access restrictions, secure hosting, authentication controls, system monitoring, and appropriate safeguards for service providers.

Although we take reasonable precautions, no electronic transmission or storage system can be guaranteed to be completely secure.

Where a personal data breach occurs, we will take appropriate steps and provide notifications where required by applicable law.

10. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.

Retention may be necessary for:

• Order processing and delivery.
• Payment verification and transaction records.
• Customer support and dispute resolution.
• Returns, refunds, and warranty-related matters, where applicable.
• Tax, accounting, and legal compliance.
• Security and fraud prevention.

When information is no longer required, we will take reasonable steps to delete, anonymise, or securely dispose of it, subject to applicable legal retention obligations.

11. Your Privacy Rights

Under the Kenya Data Protection Act, 2019, and applicable regulations, you may have the right to:

• Be informed about how your personal information is processed.
• Request access to personal information we hold about you.
• Request correction of inaccurate, incomplete, or misleading information.
• Request deletion of personal information where legally applicable.
• Object to certain forms of processing.
• Request restriction of processing where applicable.
• Request data portability where legally applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Office of the Data Protection Commissioner in Kenya.

To exercise your rights, contact us using the details in Section 12.

We may request reasonable information to verify your identity before processing a request. Some rights are subject to legal conditions and exceptions.

12. Access, Correction, and Data Deletion Requests

You may request access to, correction of, or deletion of personal information held by House of Booch, including information associated with website orders and WhatsApp Business communications.

To submit a request:

1. Email admin@booch.co.ke with the subject line “Personal Data Request” or “Personal Data Deletion Request”.
2. Describe your request and identify the relevant account, order, or WhatsApp telephone number, where applicable.
3. Provide reasonable information to verify your identity if requested.
4. We will review and respond to your request in accordance with applicable law.

Where deletion is legally permitted, we will take reasonable steps to remove the relevant information from our active systems and instruct relevant processors to do so where required.

We may retain certain information where necessary to comply with legal obligations, maintain required transaction records, resolve disputes, or establish, exercise, or defend legal claims.

Deleting information held by House of Booch does not automatically delete information independently retained by payment providers, WhatsApp, Meta, or other third parties. You may need to contact those providers separately.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, payment services, social media platforms, and delivery services.

We do not control the privacy practices of these third parties and are not responsible for their independent handling of personal information.

We encourage you to review their respective privacy policies before sharing information with them.

14. International Data Transfers

Some technology, hosting, analytics, payment, and communication providers may process personal information outside Kenya.

Where personal information is transferred outside Kenya, we will take appropriate steps to ensure that the transfer complies with applicable Kenyan data protection laws and that the necessary safeguards are in place.

15. Children’s Privacy

Our website is not specifically directed at children.

We do not knowingly collect personal information from children where parental or guardian consent is legally required without obtaining the necessary consent.

If we become aware that personal information has been collected unlawfully, we will take appropriate steps to address the situation in accordance with applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business operations, website functionality, payment methods, communication services, or legal obligations.

Revisions will be published on this page with an updated “Last Updated” date.

We encourage customers and website visitors to review this policy periodically.

17. Contact House of Booch

For questions about this Privacy Policy, data protection concerns, or requests to access, correct, or delete personal information, contact us:

• Business Name: House of Booch
• Country: Kenya
• Email: admin@booch.co.ke
• Website: booch.co.ke
• Telephone: 0712 849 403
• Business Address: Ruiru Business Park, Kenya

18. Governing Law

This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019, and applicable regulations.