Privacy notice

Draft. Items in [square brackets] must be filled in, and the page reviewed by an advocate, before Synara takes real orders.

Last updated: 8 October 2026

This notice explains what personal information Synara (Synara) collects, why, and your rights under the Data Protection Act, 2019. [Registration with the Office of the Data Protection Commissioner: number, once registered.]

What we collect

• Buyers: name, phone number, delivery county, town and address, what you ordered, and the M-Pesa number, amount and receipt number of your payment.
• Agents: shop name and location, your name, phone numbers, password (stored scrambled, never readable), and if you give them: national ID number, KRA PIN, next of kin, photos of your ID, and your shop's map location.
• Riders: name, phone number, password (stored scrambled), number plate, the county you work in, and if you give them: national ID number and photos of your ID. While you are on duty and choose to send it, the location of your phone.
• Everyone: basic technical records kept by the web server, such as your internet address and the pages requested.

We do not see or store your M-Pesa PIN. We do not use advertising or tracking cookies. The site stores a small amount in your browser so that your cart, your recent order and your login are remembered.

Why we use it

• To take, pay for, deliver and support your order.
• To check that agents and riders are who they say they are.
• To find the nearest rider for a delivery.
• To pay agents and riders, keep accounts, prevent fraud and meet legal duties.

Who sees it

• The shop sees the buyer's name, town and county, and the items. It does not see the buyer's phone number or street address.
• The rider sees the buyer's name, phone number and full address only after accepting the delivery.
• The buyer sees the shop's name and location and, once a rider has the order, the rider's name, phone number and number plate.
• Safaricom processes M-Pesa payments.
• Our hosting provider stores the website and its database. [Name and country of the hosting provider.]
• ID photos can be seen only by Synara staff.
• We do not sell personal information. We share it with authorities only when the law requires.

How long we keep it

Order and payment records are kept for [7 years], as tax and accounting law requires. Agent and rider details are kept while the account is open and for [period] afterwards. ID photos of applicants who are not approved are deleted within [period].

Your rights

You may ask us what information we hold about you, ask for a copy, ask us to correct it, object to how we use it, and ask us to delete it where we have no legal reason to keep it. Contact the email on our Help page or the phone number on our Help page. If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Security

The site uses an encrypted connection. Passwords are stored scrambled. ID photos are kept in a private area that cannot be reached by web address. Access to personal information is limited to the people who need it.