Privacy Policy
Who We Are
Our website address is: https://otakuvault.co.ke.
Otaku Vault is an online store offering anime merchandise, collectibles, and pop culture products.
Compliance with Kenya Data Protection Act (2019)
Otaku Vault is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019.
We ensure that:
- Your data is collected lawfully and transparently
- Data is only used for specified, legitimate purposes
- We collect only necessary data (data minimisation)
- Your data is kept secure and confidential
- You have rights over your personal data
Information We Collect
We may collect the following types of personal data:
- Name
- Phone number
- Email address
- Delivery address
- Order and purchase details
- IP address and browser data
How We Use Your Information
We use your data to:
- Process and deliver your orders
- Communicate order updates (via SMS, WhatsApp, or email)
- Provide customer support
- Improve our website and user experience
- Prevent fraud and ensure security
Comments
When visitors leave comments, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam.
An anonymised string (hash) from your email may be sent to Gravatar. View their privacy policy here: https://automattic.com/privacy/.
Approved comments may display your profile picture publicly.
Media
Avoid uploading images with embedded location data (EXIF GPS), as visitors can extract this information.
Cookies
We use cookies to enhance your browsing experience.
- Comment cookies last for 1 year
- Login cookies last for 2 days (or 2 weeks if “Remember Me” is selected)
- Screen preference cookies last for 1 year
- Temporary cookies are used to test browser compatibility
Cookies help us remember your preferences and improve site functionality.
Payments (M-Pesa & Card Processing)
We support secure payments via:
- M-Pesa
- Debit/Credit Cards (via third-party payment gateways)
When you make a payment:
- We do not store full card details on our servers
- Payment data is securely processed by trusted third-party providers
- M-Pesa transactions are processed via Safaricom’s secure system
We only receive necessary transaction confirmations (e.g., payment status, reference number).
Order Processing & Delivery
To fulfil your orders, we may share necessary information such as:
- Name
- Phone number
- Delivery address
This data may be shared with:
- Delivery partners
- Courier services
This is strictly for order fulfilment and delivery purposes.
Embedded Content from Other Websites
Articles may include embedded content (videos, images, etc.). These behave as if you visited the external site directly and may collect your data, use cookies, and track interactions.
Who We Share Your Data With
We may share your data with:
- Payment processors (for secure transactions)
- Delivery partners (for order fulfilment)
- Spam detection services
If you request a password reset, your IP address will be included in the reset email.
How Long We Retain Your Data
- Comments are retained indefinitely
- User account data is stored as long as the account exists
- Order data is retained for legal, tax, and operational purposes
Your Rights
Under the Kenya Data Protection Act, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Withdraw consent at any time
To exercise your rights, contact us at: [Insert Your Email Address]
Data Security
We implement appropriate technical and organisational measures to protect your data from:
- Unauthorised access
- Loss or misuse
- Alteration or disclosure
Where Your Data Is Sent
Visitor comments may be checked through automated spam detection services.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.