Legal

Privacy Policy

Last updated: 27 July 2026 · Applies to sokonimall.com, Sokoni Mall on WhatsApp, seller listings, and pickup point applications

Sokoni Mall Enterprise (“we”, “us”) respects your privacy. This Policy explains what we collect, why, and your choices when you use our prepaid marketplace and WhatsApp assistant.

1. Information we collect

• WhatsApp messages — text you send to our business number, including order details, names, delivery addresses, and phone numbers.
• Order data — products ordered, SKN-#### order IDs, shipment status, escrow status, and M-Pesa payment confirmations.
• Payment data — M-Pesa STK callbacks (amount, receipt number, phone); manual paid claims you send in chat for till verification.
• Reviews — star ratings and comments you submit on WhatsApp or our website.
• Seller listings — photos, titles, descriptions, prices, tags, condition (brand new / pre-loved), and seller contact details submitted at sokonimall.com/suppliers/list.
• Feed & browse behaviour — anonymous session events (views, saves, clicks) on the website to improve recommendations.
• Pickup point applications — shop name, contact, location, hours, and M-Pesa details if you apply at pickup-points.html.
• Website usage — browser type, pages viewed, and preferences stored locally (e.g. dark mode, saved bag) via localStorage.
• Technical logs — IP addresses, timestamps, and error data for security and debugging.

We do not collect M-Pesa PINs, card numbers, or passwords through WhatsApp or our website.

2. How we use information

• Process prepaid orders and hold funds in escrow until delivery
• Send order, shipment, and payout updates
• Moderate seller listings and enforce marketplace policies
• Review pickup point applications and pay commissions
• Power Sokoni Plug AI search and support (local catalog only)
• Improve feed ranking and product recommendations
• Display customer reviews on our website (first name and comment)
• Post marketing content (e.g. TikTok) featuring products — not your private messages
• Prevent fraud and abuse

3. Conversational AI

By using Sokoni Plug on WhatsApp or ask.html, you agree to processing necessary to fulfill requests:

• What we send to AI: your message text and relevant catalog/order context — not M-Pesa PINs or card data.
• Scope: local Sokoni listings only. The assistant does not search international marketplaces.
• Providers: secure API layers (e.g. OpenAI via our backend). Sub-processors do not receive financial credentials.
• We do not sell your chat history or phone number to third-party marketers.

4. Third-party services

We use trusted providers including:

• WhatsApp / WAHA — messaging
• Safaricom Daraja — M-Pesa STK payments
• Cloudflare — website hosting and security
• AI providers — conversational replies
• TikTok — optional social posting

Each provider has its own privacy policy. WhatsApp is operated by Meta; your use of WhatsApp is also subject to Meta's policies.

5. Sharing

We do not sell your personal data. We may share information with:

• Sellers — order and item details needed to fulfill; buyer contact when required for hub drop-off or delivery.
• Logistics partners & pickup points — name, phone, and SKN-#### needed for delivery or collection.
• Service providers — who help us operate payments, hosting, and messaging under contract.
• Authorities — when required by law.

Sellers: listing photos and descriptions appear on the public storefront. Your phone may be used internally for payout and order coordination.

Pickup points: approved partners may appear on our website (shop name, area, hours). We contact applicants on WhatsApp for operational updates.

6. Retention

We keep order, payment, and contact records as long as needed for business, legal, escrow, and support purposes, then delete or anonymise when no longer required.

7. Security

We use reasonable measures (HTTPS, access controls, token-gated admin APIs). No online service is 100% secure.

8. Your rights

Under applicable Kenyan data-protection law, you may request access, correction, or deletion of your personal data. Contact us on WhatsApp or email and we will respond within a reasonable time.

9. Children

Sokoni is not directed at children under 13. We do not knowingly collect data from children.

10. Cross-border processing

Some providers (AI, Cloudflare) may process data outside Kenya. We use them only where necessary to provide the service.

11. Changes

We may update this Policy. The “Last updated” date will change. Material changes may be announced on our website or WhatsApp channel.

12. Contact

Privacy questions or data requests:

• WhatsApp / calls: +254 117 422 428
• Email: support@sokonimall.com
• Website: sokonimall.com