Privacy Policy

Last Updated: 1^st August, 2025

This Privacy Policy explains how Redirect Mall Limited("Redirect Mall,” "we,” "our,” or "us”) collects, uses, shares, and protects your personal data when you use our website https://redirectmall.com (the "Site”), mobile applications, and related services (together, the "Services”).

We are committed to protecting your privacy and complying with the Kenya Data Protection Act (2019) and applicable international privacy regulations (including GDPR and CCPA, where relevant).

1. Who We Are

Redirect Mall Limited
Email: support@redirectmall.com
Postal Address: P.O BOX 50260 WESTLANDS

We are the data controller for your personal data. If you have any questions about this policy, please contact our Privacy Officerat the email above.

2. Data We Collect

We may collect the following categories of personal data:

• Identity Data: name, username, date of birth, gender.
• Contact Data: email, phone number, postal address.
• Transaction Data: purchase history, payment details (processed by secure third-party providers).
• Technical Data: IP address, device type, browser, cookies, log data.
• Usage Data: pages visited, time spent, interactions.
• Marketing Data: preferences, communication consents.
• Employment/Business Data (for vendors/service providers): company name, certifications, financial info.

We do not knowingly collect data from children under 18. If we discover such data, we will delete it immediately.

3. How We Collect Data

• Directly from you: when you register, purchase, or contact us.
• Automatically: through cookies, analytics, and system logs.
• From third parties: service providers, affiliates, or public databases (where lawful).

4. Use of Data

We process your data for purposes including:

• Providing and improving our Services.
• Processing transactions and delivering orders.
• Customer support and responding to inquiries.
• Marketing and promotional communications (with your consent).
• Fraud detection, security monitoring, and legal compliance.
• Research, statistics, and anonymized business analysis.

Legal bases: We rely on consent, contract necessity, legal obligations, and legitimate interests (balancing your rights).

5. Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: site functionality and security.
• Analytics cookies: traffic measurement, service improvement.
• Preference cookies: remembering settings and choices.
• Marketing cookies: personalized offers and advertising.

You can manage cookie preferences via your browser settings or our cookie banner.

6. Sharing of Data

We may share your personal data with:

• Service providers (e.g. payment processors, delivery partners, analytics providers).
• Business partners (when you engage with specific offers or vendors).
• Regulators, law enforcement, or courts where legally required.
• Corporate transactions: in case of merger, acquisition, or restructuring.

We do not sell your personal data to third parties.

7. International Transfers

We primarily process data in Kenya. However, some service providers may process data in other jurisdictions. Where this occurs, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your rights.

8. Data Retention

We retain personal data only as long as necessary for the purposes collected:

• Account data: until your account is closed.
• Transaction data: 7 years (for legal/accounting purposes).
• Marketing data: until you opt-out or withdraw consent.
• Logs/technical data: typically 12–24 months.

After retention, data is securely deleted or anonymized.

9. Security

We use technical and organizational measures to protect your data, including encryption, access controls, and secure servers. However, no system is 100% secure, and you share information at your own risk.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access – request a copy of your personal data.
• Correction – fix inaccurate or incomplete data.
• Deletion – request we erase your data.
• Restriction – limit processing in certain cases.
• Objection – object to processing (e.g. direct marketing).
• Portability – request transfer of your data to another provider.
• Withdraw consent – revoke consent at any time.

To exercise these rights, email support@redirectmall.com. We may need proof of identity.

11. Children’s Data

Our Services are intended for persons 18 years and above. If you are under 18, you may use the Services only with parental/guardian consent.

12. Third-Party Links & Services

Our Site may include links or integrations with third-party websites, apps, or services. We are not responsible for their privacy practices. Please review their privacy policies separately.

13. Marketing Communications

You may receive marketing emails or SMS (where you have opted in). You can unsubscribe at any time using the link in communications or by contacting us at privacy@redirectmall.com.

14. Payment Processing

We use secure third-party payment processors. We do not store your credit/debit card details. Payments are processed in compliance with PCI DSS standards.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or site notice at least 30 days before taking effect.

16. Governing Law & Dispute Resolution

This Privacy Policy is governed by the laws of Kenya. Any disputes shall be subject to the exclusive jurisdiction of Kenyan courts, unless otherwise required by applicable law.

17. Contact Us

If you have any questions, complaints, or wish to exercise your rights, please contact:

Redirect Mall Limited
Email: privacy@redirectmall.com
Postal Address: P.O BOX 50260 WESTLANDS
Phone: 254715083922