Privacy Policy

Account Information:

• Name, email address, and phone number (when you create an account)
• Securely stored passwords (hashed - we never store plain text passwords)

Order & Delivery Information:

• Delivery addresses you save for order fulfillment
• Order history including items purchased, quantities, and order status
• Payment method selection (M-Pesa or Cash on Delivery)

Session Data:

• Authentication tokens stored in browser cookies to keep you signed in
• Shopping cart contents (stored locally in your browser)

We do not track or store IP addresses, browser types, device information, or use analytics cookies.

We use your personal information to:

• Process and fulfill your orders
• Send order confirmations and delivery updates
• Provide customer support and respond to inquiries
• Improve our website and services
• Send promotional emails (with your consent)
• Prevent fraud and ensure security

We do not sell your personal information. We only share data when necessary:

• Internal Delivery Team: Name, phone, and delivery address to fulfill orders
• Email Service (Resend): Email address for sending OTP codes, order confirmations, and account notifications
• Legal Authorities: When required by law or to protect our rights

Note: M-Pesa payments are processed directly through Safaricom. We do not store or process payment card information.

We use minimal cookies and local storage for:

• Authentication: JWT tokens stored in secure HTTP-only cookies to keep you signed in (expires after 7 days, or 30 days if you select "Remember me")
• Shopping Cart: Cart items stored locally in your browser

We do not use tracking cookies, advertising cookies, or third-party analytics tools like Google Analytics.

Disabling cookies will prevent you from signing in, but you can still browse products.

We implement industry-standard security measures to protect your data:

• Secure password storage using hashing technqiues
• Secure HTTPS connections
• JWT-based authentication with expiring tokens
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

You have the right to:

• Access: Request a copy of your personal data
• Update: Correct inaccurate information in your account
• Delete: Request deletion of your account and data
• Opt-out: Unsubscribe from promotional emails

To exercise these rights, contact us at contact@excellentfinishes.com

We retain your personal information for as long as:

• Your account is active
• Needed to provide services and fulfill orders
• Required by law for tax and accounting purposes

After account deletion, we may retain anonymized data for analytics.

Our website may contain links to third-party websites (e.g., social media, payment gateways). We are not responsible for their privacy practices. Please review their policies before sharing information.

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, contact us immediately.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services constitutes acceptance of the revised policy.

For questions about this Privacy Policy or to exercise your rights, contact us:

Email: contact@excellentfinishes.com

Phone: +254 723 062 920

Location: Nairobi, Kenya