Privacy Policy

The information Viesta handles depends on what a customer chooses to provide and whether an inquiry proceeds to an order.

• Full name and phone number.
• Delivery location and an optional address or landmark.
• Products, quantities, and optional order notes.
• The checkout acknowledgement of the Terms of Service and Privacy Policy.
• Inquiry type and inquiry message.
• WhatsApp conversation history.
• M-Pesa confirmation or transaction information shared for payment verification.
• Delivery, return, refund, complaint, and issue-resolution communications.

The website keeps checkout and contact-form entries in the customer's browser while the relevant page is being used. It prepares a WhatsApp message from the information entered by the customer.

Viesta does not receive that prepared information unless the customer sends the message. WhatsApp and Meta may process the prepared content when the customer chooses to open their service, and the sent message becomes available to Viesta in the business conversation.

The storefront uses the browser's local storage to remember cart product identifiers and quantities on the customer's device. This is necessary to preserve the cart between page visits and is not used for advertising or cross-site tracking.

A customer can remove this information by clearing the cart or using the storage controls provided by their browser. Blocking or clearing browser storage may prevent the cart from being remembered.

Viesta limits its use of customer information to purposes connected with the customer's request, an order, applicable obligations, and reasonable protection of the ordering channel.

• Responding to product and service inquiries.
• Preparing, verifying, and confirming orders.
• Confirming payment and coordinating delivery.
• Handling cancellations, returns, refunds, complaints, and support requests.
• Keeping records required by applicable accounting, tax, consumer-protection, or other legal obligations.
• Preventing or investigating fraud, misuse, and security incidents.

Depending on the circumstances, Viesta handles information to take steps requested by a customer, perform an accepted order, meet a legal obligation, or pursue a legitimate operational or security interest that does not override the customer's rights. Viesta will seek consent where applicable law requires it.

WhatsApp and Meta support customer communication and the order handoff. Vercel hosts the production website and may process technical request and service-log information. The M-Pesa provider processes payment and transaction information under its own applicable terms and legal obligations.

These providers may process information in locations outside Kenya. Viesta must use providers and safeguards consistent with applicable data-protection requirements and will update this policy if the provider arrangement materially changes.

Viesta performs deliveries itself at launch and does not currently disclose customer delivery details to an external courier.

Viesta does not use Google Analytics, Meta Pixel, TikTok Pixel, advertising pixels, or similar behavioral-tracking tools at launch.

Viesta does not use inquiry or order details for promotional or educational WhatsApp marketing at launch. A future marketing service or tracking tool will require an appropriate privacy review, updated disclosure, and consent mechanism before activation.

Viesta keeps information only for as long as reasonably needed for the purpose described below, unless a legal obligation, active dispute, fraud investigation, refund, or unresolved complaint requires longer retention.

• Incomplete WhatsApp inquiries are deleted within 30 days after the last activity.
• Completed-order WhatsApp conversations are deleted within 30 days after delivery or final issue resolution.
• Cart information remains in the customer's browser until cleared through the cart, application behavior, or browser controls.
• Financial, payment, tax, or accounting records are retained only for the period required by applicable Kenyan law and legitimate accounting obligations.
• Viesta does not maintain marketing-contact records at launch.

Viesta uses proportionate safeguards including two-factor authentication for the business WhatsApp account, access limited to authorized people and devices, device screen locks, reasonable account controls, and deletion under the retention schedule.

Viesta avoids unnecessary copying of customer details into spreadsheets, notebooks, customer-management systems, or cloud-storage records. No transmission or storage method can be guaranteed to be completely secure.

Subject to applicable Kenyan law, a person may ask to be informed about the use of their personal data, request access, object to certain processing, request correction of inaccurate or misleading data, or request deletion where applicable.

Some information may need to be retained where the law requires it or while a payment issue, complaint, dispute, fraud concern, or legal claim remains active. Viesta will explain the applicable reason when responding to a request.

A person may also raise a concern with Kenya's Office of the Data Protection Commissioner where that right is available.

The storefront is not intended to form order contracts with children, and Viesta does not knowingly collect information directly from minors. A parent or guardian should contact Viesta if they believe a minor has supplied personal information without appropriate involvement.

Viesta may update this policy when its storefront, providers, data practices, or legal obligations change. The page will show the applicable effective date and last-updated date. A material change will be communicated in an appropriate manner before or when it takes effect where required.

Send privacy questions or data-rights requests to viestaltd@gmail.com. Customers may also use the phone and WhatsApp details published on the Viesta website. Viesta may request reasonable information to verify identity before acting on a request involving personal data.