Privacy Policy — Rama Fashions & Designs

Who We Are

Rama Fashions & Designs ("we", "us", "our") is a fashion retailer based in Nairobi, Kenya. We operate the website at ramafashions.co.ke and any associated mobile or web applications. We are the data controller for all personal information collected through our platform.

Our registered address is Agriculture House, Along Harambee Avenue, Nairobi, Kenya.

Information We Collect

We collect information you provide directly to us, and information generated as you use our services.

Information you provide:

Name, email address, and phone number when you register or place an order
Delivery address and county information
M-Pesa phone number when paying via M-Pesa
Messages you send via our contact form
Password (stored as an encrypted hash — we never store plain-text passwords)

Information collected automatically:

Pages viewed and products browsed during your session
Your cart and wishlist activity
Order history and transaction records
Device type and browser information (for site optimisation)

How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfil your orders, including sending order confirmations
To facilitate M-Pesa and card payment processing
To send delivery updates and order status notifications
To manage your account and saved addresses
To respond to your enquiries and customer support requests
To improve our website, product range, and shopping experience
To send occasional marketing emails — only if you have opted in

We will never use your data for purposes other than those listed above, and we will never sell or rent your personal information to third parties.

Data Sharing

We share your data only where necessary to deliver our services:

Safaricom (M-Pesa): Your phone number and payment details are shared with Safaricom's Daraja API solely to process M-Pesa payments.
Delivery partners: Your name, phone number, and delivery address are shared with our courier partners to fulfil your order.
Payment processors: Card payment data is handled by our payment gateway provider and is never stored on our servers.

We do not share your data with advertisers, data brokers, or any third party for commercial purposes.

Data Security

We take the security of your data seriously and implement the following measures:

All passwords are hashed using bcrypt — they cannot be reversed or read by anyone
Our website is served over HTTPS (SSL/TLS encryption)
Database access is restricted to authorised personnel only
Payment card details are never stored on our servers
Admin accounts require separate authentication credentials

While we take every reasonable precaution, no system is entirely infallible. If you suspect unauthorised access to your account, please contact us immediately.

Cookies & Sessions

We use PHP sessions (stored as cookies) to maintain your login state, preserve your cart between pages, and apply coupon codes during checkout. These are functional session cookies — they are not used for tracking or advertising.

Sessions expire when you close your browser or log out. No third-party tracking cookies are placed on our site.

Your Rights

Under Kenya's Data Protection Act, 2019, you have the right to:

Access — request a copy of the personal data we hold about you
Correction — ask us to correct inaccurate or incomplete data
Deletion — request that we delete your account and personal data
Portability — receive your data in a portable, machine-readable format
Objection — object to us processing your data for marketing purposes

To exercise any of these rights, contact us at hello@ramafashions.co.ke. We will respond within 14 business days.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Order records are retained for a minimum of 7 years for accounting and legal compliance purposes. If you delete your account, your personal profile data is removed immediately, though anonymised order records may be retained for legal purposes.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.