Skip to content

Privacy Policy

This privacy policy explains how Bakkal Turkish Products in Kenya (“we”, “us”) collects, uses and protects your personal data when you visit bakkalturkishproducts.com, create an account or place an order. We handle personal data in line with the Kenya Data Protection Act, 2019.

Who we are

Bakkal Turkish Products in Kenya
Adams Arcade, Ngong Rd, Nairobi, Kenya
Phone and WhatsApp: +254 700 22 22 30

We are the data controller for the personal data described in this policy.

What personal data we collect

  • Account and order details: your name, phone number, email address, delivery address and the items you order.
  • Payment details: we accept payment by M-Pesa. We record the order total and the M-Pesa transaction details needed to confirm your payment. We never ask for or store your M-Pesa PIN.
  • Messages: what you send us by phone, WhatsApp or email when you ask about a product or an order.
  • Technical data: your IP address, browser and device type, and the pages you visit, collected through cookies and similar technologies.

Why we use your data

  • To process and deliver your orders and confirm your payment.
  • To manage your account, including your order history and re-ordering.
  • To answer your questions and provide customer support.
  • To keep the website secure and prevent fraud and fake registrations.
  • To understand how the website is used and improve it.
  • To keep the accounting and tax records that the law requires.

We use your data only when we have a lawful reason to do so: to carry out the order you placed, because the law requires it, because it is in our legitimate interest to run and protect the shop, or because you have given your consent. Where we rely on your consent, you can withdraw it at any time.

Who we share your data with

We do not sell your personal data. We share it only with the people and services that help us run the shop, and only as much as they need:

  • delivery partners, so your order can reach you;
  • our website hosting and security providers;
  • our email and messaging tools, including WhatsApp when you contact us there;
  • analytics and advertising services, such as Google, which help us measure how the website performs.

We may also disclose data when the law or a public authority requires it.

Cookies

We use cookies that the shop needs to work (for example to keep items in your basket and keep you signed in) and cookies that help us measure traffic. You can block or delete cookies in your browser settings, but parts of the shop may then stop working.

Website statistics and screen recordings

To see which pages work and which do not, we measure visits to this website with a small tool that runs on our own website. We do not use an outside analytics service for this, and the data stays on our own hosting. We do not store your IP address in these statistics.

Without your consent (no cookie is set), we count the pages you open, how you reached the shop (for example Google, Facebook or WhatsApp), your device type, browser and language, the contents of your basket (without your name or account) and technical errors on the page. This is counted per visit and does not identify you. Our lawful basis is our legitimate interest in running and improving the shop.

Only if you press Accept in the cookie notice:

  • a cookie (bk_v, kept for 180 days) recognises that the same browser has come back;
  • we record anonymous screen sessions (mouse movement, clicks and scrolling) so that we can see where visitors get stuck;
  • if you are signed in, your basket can be linked to your account so that we can help you finish an order.

Our lawful basis for these is your consent. Your choice is stored in a cookie (bk_ck, 180 days).

What we never record: what you type. Text typed into forms is hidden in the recording, all fields on the checkout, account and payment pages are masked, payment frames are not recorded, and we never ask for or record your M-Pesa PIN. Visits by our own staff and by automated bots are not counted.

How long we keep it: detailed visit data is deleted after 90 days and screen recordings after 30 days. After that only daily totals (for example, how many people visited) remain, and they contain no personal data.

Your choice: choose Necessary only in the cookie notice, or change your mind at any time with the Cookie settings link at the bottom of every page. If you withdraw your consent, the cookie is deleted and the recordings of your current visit are deleted. You can also ask us to delete data about you using the contact details above.

Where your data is processed

Some of the services we use, such as website hosting and Google tools, may process data on servers outside Kenya. When that happens we use providers that protect personal data, and we share only what is needed.

How long we keep your data

We keep your data only as long as we need it for the reasons above. Order and payment records are kept for the period required by Kenyan tax and accounting law. When we no longer need your data we delete it or make it anonymous.

How we protect your data

We keep the website on secured hosting, limit access to personal data to the people who need it, and use technical measures against unauthorised access. No online service can be completely risk-free, but we take the protection of your data seriously.

If we ever learn that your personal data has been accessed or lost without permission, we will tell the Office of the Data Protection Commissioner and the people affected, as the law requires.

Your rights

Under the Kenya Data Protection Act, 2019 you have the right to:

  • be informed about how your data is used;
  • access the personal data we hold about you;
  • object to the processing of your data;
  • ask us to correct data that is wrong or out of date;
  • ask us to delete data we no longer need to keep;
  • receive your data in a common format, where this applies.

To use any of these rights, contact us by phone or WhatsApp at +254 700 22 22 30. We may ask you to confirm your identity first, and we will reply within the time the law allows.

If you are not satisfied with how we handle your data, you can complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).

Children

Our shop is meant for adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page.

Last updated: October 2026