Skip to content

Privacy Policy

This privacy policy explains how Bakkal Turkish Products in Kenya (“we”, “us”) collects, uses and protects your personal data when you visit bakkalturkishproducts.com, create an account or place an order. We handle personal data in line with the Kenya Data Protection Act, 2019.

Who we are

Bakkal Turkish Products in Kenya
Adams Arcade, Ngong Rd, Nairobi, Kenya
Phone and WhatsApp: +254 700 22 22 30

We are the data controller for the personal data described in this policy.

What personal data we collect

  • Account and order details: your name, phone number, email address, delivery address and the items you order.
  • Payment details: we accept payment by M-Pesa. We record the order total and the M-Pesa transaction details needed to confirm your payment. We never ask for or store your M-Pesa PIN.
  • Messages: what you send us by phone, WhatsApp or email when you ask about a product or an order.
  • Technical data: your IP address, browser and device type, and the pages you visit, collected through cookies and similar technologies.

Why we use your data

  • To process and deliver your orders and confirm your payment.
  • To manage your account, including your order history and re-ordering.
  • To answer your questions and provide customer support.
  • To keep the website secure and prevent fraud and fake registrations.
  • To understand how the website is used and improve it.
  • To keep the accounting and tax records that the law requires.

We use your data only when we have a lawful reason to do so: to carry out the order you placed, because the law requires it, because it is in our legitimate interest to run and protect the shop, or because you have given your consent. Where we rely on your consent, you can withdraw it at any time.

Who we share your data with

We do not sell your personal data. We share it only with the people and services that help us run the shop, and only as much as they need:

  • delivery partners, so your order can reach you;
  • our website hosting and security providers;
  • our email and messaging tools, including WhatsApp when you contact us there;
  • analytics and advertising services, such as Google, which help us measure how the website performs.

We may also disclose data when the law or a public authority requires it.

Cookies

We use cookies that the shop needs to work (for example to keep items in your basket and keep you signed in) and cookies that help us measure traffic. You can block or delete cookies in your browser settings, but parts of the shop may then stop working.

Website statistics and screen recordings

To see which pages work and which do not, we measure visits to this website with a small tool that runs on our own website. We do not use an outside analytics service for this, and the data stays on our own hosting. We do not store your IP address in these statistics.

Without your consent (no cookie is set), we count the pages you open, how you reached the shop (for example Google, Facebook or WhatsApp), your device type, browser and language, the contents of your basket (without your name or account) and technical errors on the page. This is counted per visit and does not identify you. Our lawful basis is our legitimate interest in running and improving the shop.

Only if you press Accept in the cookie notice:

  • a cookie (bk_v, kept for 180 days) recognises that the same browser has come back;
  • we record anonymous screen sessions (mouse movement, clicks and scrolling) so that we can see where visitors get stuck;
  • if you are signed in, your basket can be linked to your account so that we can help you finish an order.

Our lawful basis for these is your consent. Your choice is stored in a cookie (bk_ck, 180 days).

What we never record: what you type. Text typed into forms is hidden in the recording, all fields on the checkout, account and payment pages are masked, payment frames are not recorded, and we never ask for or record your M-Pesa PIN. Visits by our own staff and by automated bots are not counted.

How long we keep it: detailed visit data is deleted after 90 days and screen recordings after 30 days. After that only daily totals (for example, how many people visited) remain, and they contain no personal data.

Your choice: choose Necessary only in the cookie notice, or change your mind at any time with the Cookie settings link at the bottom of every page. If you withdraw your consent, the cookie is deleted and the recordings of your current visit are deleted. You can also ask us to delete data about you using the contact details above.

Where your data is processed

Some of the services we use, such as website hosting and Google tools, may process data on servers outside Kenya. When that happens we use providers that protect personal data, and we share only what is needed.

How long we keep your data

We keep your data only as long as we need it for the reasons above. Order and payment records are kept for the period required by Kenyan tax and accounting law. When we no longer need your data we delete it or make it anonymous.

Marketing emails

From time to time we send offers and news about new products by email, only to people who have said yes. Without a yes, we send you no sales emails.

How you say yes.

  • The box at checkout, which is not ticked for you: “Send me offers and new products by email”.
  • “Keep me updated” in the one email we send once to some earlier customers, asking whether they want to hear from us.

How you say no. Use “Unsubscribe” in any email (one click) or “No thanks” in the permission email, or tell us by phone or WhatsApp on +254 700 22 22 30.

What we keep. A record of your choice: yes or no, where you gave it and when. It holds a coded summary of your email address, not the address itself. It has no end date, so that we can always respect your choice. While an email waits to be sent, your address and name sit in a queue on our website until it has gone (if delivery failed, for up to 30 days after the campaign ends). If you use the checkout box, your choice is also saved with your order.

No open tracking. Our emails have no tracking pixel, and links in them carry only the campaign name. Visits from an email are counted in our website statistics, as described in “Website statistics and screen recordings”.

Who sends them. Our own website server. We use no outside email marketing service.

Cart reminders

When cart reminders are switched on, the checkout page shows a box that is not ticked for you: “Email me a reminder if I don’t finish my order”. If you tick it, we send you one email about an hour after you stop, with the items in your basket and a button to finish your order. If you do not tick it, we save nothing and send nothing.

What we save, only if you tick the box:

  • your email address and first name;
  • the items in your basket and how many of each;
  • the time, and a coded summary of your basket session so that we can match it to your order.

We do not send it if you place your order, if we already sent you a reminder in the last 24 hours, or if you have unsubscribed.

How long we keep it. Your email address and first name are deleted as soon as the reminder has been sent, or you place your order. The rest of the record (items and coded summary) is deleted after 30 days. If you untick the box, the record is deleted at once.

Your choice. Use “Unsubscribe” in the email (one click), or tell us by phone or WhatsApp on +254 700 22 22 30. The email has no tracking pixel. If you press its button we count that click and put your items back in your basket. The email is sent by our own website server.

How we protect your data

We keep the website on secured hosting, limit access to personal data to the people who need it, and use technical measures against unauthorised access. No online service can be completely risk-free, but we take the protection of your data seriously.

If we ever learn that your personal data has been accessed or lost without permission, we will tell the Office of the Data Protection Commissioner and the people affected, as the law requires.

Your rights

Under the Kenya Data Protection Act, 2019 you have the right to:

  • be informed about how your data is used;
  • access the personal data we hold about you;
  • object to the processing of your data;
  • ask us to correct data that is wrong or out of date;
  • ask us to delete data we no longer need to keep;
  • receive your data in a common format, where this applies.

To use any of these rights, contact us by phone or WhatsApp at +254 700 22 22 30. We may ask you to confirm your identity first, and we will reply within the time the law allows.

If you are not satisfied with how we handle your data, you can complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).

Children

Our shop is meant for adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page.

Last updated: 29 October 2026