Privacy Policy

When you use MAWEX, we collect information you provide directly: your name, phone number, email, delivery site addresses, and payment details needed to process an order (we do not store your full M-Pesa PIN or card number).

We also collect information generated by using the Service: order history, delivery location data during an active delivery (for drivers), and device/usage information such as app version and general diagnostics.

We use your information to: process and fulfil your orders; match orders to suppliers and drivers; show you real-time delivery tracking; send order-related notifications (SMS, push, email); provide customer support; and improve the Service. We do not sell your personal data.

Under Kenya's Data Protection Act, 2019, we process your data on the basis of: performance of the contract formed when you place an order; your consent, where separately requested (for example, marketing communications); and our legitimate interest in operating and securing the Service, balanced against your rights.

To fulfil an order, we share the necessary parts of your information with the supplier and driver assigned to it (for example, your delivery address and phone number for coordination), never your full order history or payment details.

We also share information with service providers who help us operate the Service (payment processing, SMS/push notification delivery, cloud hosting), each bound to use it only for that purpose.

We retain order and account information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations. Live delivery location data is retained only for the duration needed for tracking and support, not indefinitely.

Under the Data Protection Act, 2019, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to legal/legitimate-interest exceptions; object to certain processing; and lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these, contact us via the contact page.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect parts of the Service.

We use reasonable technical and organizational measures, including encryption in transit, access controls, and row-level database permissions, to protect your data. No system is perfectly secure, and we can't guarantee absolute security.

The Service is not directed at children under 18, and we don't knowingly collect data from them.

We may update this policy from time to time. We'll post the updated version here with a new "Last updated" date.

Questions about this policy, or to exercise your data protection rights, can be sent via the contact page.