This privacy policy explains how Soko Sensei ("we", "us" or "the platform") collects, uses and protects information when a business uses our platform to run its store, and when that business's customers shop or book appointments through a website powered by us. By using Soko Sensei, you agree to the practices described here.
Who we are
Soko Sensei is an e-commerce platform operated by Volcha Enterprises Ltd (www.volcha.co.ke). If you have any questions about this policy or your data, contact us at info@volcha.co.ke.
Information we collect
We collect the information needed to run stores and process orders and bookings:
- Account information: names, email addresses and login details for business owners and staff who use the dashboard.
- Store and catalogue data: products, services, prices, stock, branding and store settings that a business enters.
- Order and booking data: details a customer gives when placing an order or booking an appointment, such as their name, phone number, email address and the booking details they supply.
- Payment information: transaction records for payments made through M-Pesa and Pesapal. We keep the records needed for tracking and reconciliation. We never see or store card details; those are entered on Pesapal's own page.
- Enquiries: the details you send us through the contact form on our website.
- Technical data: basic logs and request information used to keep the platform secure and working.
How we use information
We use the information we collect to:
- Provide the dashboard and the API that powers store websites.
- Process orders, track stock and handle appointment bookings.
- Take and reconcile payments.
- Send email and SMS alerts about orders, bookings and accounts, such as order confirmations and renewal reminders.
- Reply to enquiries.
- Keep stores separate, so one store can never see another store's data.
- Secure the platform and fix problems.
Third parties we work with
We use a small number of service providers to run the platform. Each one receives only the information it needs to do its job:
- Payment providers: Safaricom (M-Pesa) and Pesapal process payments. They receive the customer's phone number or payment details, the amount and the order reference. Payments go directly to the business's own account.
- Email delivery provider: sends our emails, such as order alerts and renewal reminders. It receives the recipient's email address and the message.
- SMS provider: sends text message alerts about orders and bookings. It receives the recipient's phone number and the message.
- Hosting provider: stores the platform's data on secure servers.
- Google Analytics: measures how visitors use our public website, only if they accept analytics cookies. See Cookies and analytics.
These providers handle data under their own terms and privacy policies.
How we share information
We do not sell your information. We share it only with the providers listed above, to the extent needed to provide the service, or where the law requires it.
Data retention
We keep information for as long as a store is active and as needed to provide the service, meet legal and accounting obligations, and resolve disputes. Activity records in the dashboard are kept for up to one year. When data is no longer needed, we delete or anonymise it.
Security
We take reasonable technical and organisational measures to protect your information. Each store's data is kept separate, payment keys are stored encrypted, and our API only exposes public identifiers. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access.
Cookies and analytics
Our public website uses Google Analytics to understand how visitors use it, so we can improve it. It only runs if you choose Accept in the cookie banner. If you decline, no analytics cookies are set and nothing is sent to Google Analytics.
If you accept, Google Analytics collects:
- the pages you visit and how long you stay;
- the parts of a page you scroll to and the buttons you click, such as "Start selling" or "Send message";
- your device type, browser, operating system and screen size;
- your approximate location (country and city), worked out from your internet address, which Google Analytics does not store;
- how you reached our website, for example from a search engine or a link.
This is stored in cookies named _ga and _ga_…, which last up to two years. We look
at it in summary form to see how the website is used; we don't use it to identify you. Google processes it
under its own privacy policy.
You can change your choice at any time with Cookie settings at the bottom of every page. Choosing Decline removes the analytics cookies from your browser.
Your choices
You can ask to see, correct or delete your personal information by emailing info@volcha.co.ke. If you are a customer of a store that uses Soko Sensei, you can also contact that store directly.
Changes to this policy
We may update this policy from time to time. When we do, we'll change the "last updated" date above. Significant changes will be communicated through the platform.
Contact
Questions about this privacy policy or your data? Email info@volcha.co.ke.