Privacy policy

PRIVACY POLICY

Last updated: 11 July 2026

This Privacy Policy explains how Elyscents International LLC (“Elyscents,” “we,” “us” or “our”) collects, uses, stores, protects and shares personal information when you visit https://elyscents.ke/, place an order, contact us or otherwise use our services in Kenya.

This Privacy Policy is intended to comply with applicable Kenyan data protection and privacy requirements, including the Data Protection Act, 2019, and applicable regulations and guidance issued by the Office of the Data Protection Commissioner (ODPC).

1. INFORMATION WE COLLECT

Depending on how you use our website, we may collect the following information:

  • Name
  • Email address
  • Telephone or WhatsApp number
  • Billing and delivery address
  • Order and purchase information
  • Payment-related information
  • Customer-support messages and communications
  • Device, browser and IP-address information
  • Website activity, cookie identifiers and advertising information
  • Marketing preferences
  • Information you voluntarily provide to us
  • Any other information reasonably necessary to provide our services

Payment-card details are generally processed by authorised payment providers and are not directly stored by us unless specifically stated.

2. HOW WE USE YOUR INFORMATION

We may collect and use personal information for the following purposes:

  • To process, fulfil and deliver orders
  • To confirm payments and prevent fraud
  • To communicate with you regarding your orders
  • To process returns, exchanges and refunds
  • To provide customer support
  • To create and maintain customer accounts
  • To improve our website, products and services
  • To analyse website performance and customer behaviour
  • To send promotional emails, SMS or WhatsApp messages where permitted by applicable law
  • To display, personalise and measure advertising
  • To comply with legal, regulatory, accounting and tax obligations
  • To protect our business, customers, website and systems
  • To establish, exercise or defend legal claims and rights

3. LEGAL BASIS FOR PROCESSING

We process personal information only where there is a lawful basis for doing so under applicable Kenyan data protection law.

Depending on the circumstances, we may process personal information where:

  • It is necessary to perform a contract or take steps at your request before entering into a contract
  • It is necessary to comply with a legal or regulatory obligation
  • You have provided valid consent
  • Processing is necessary for a legitimate purpose, where permitted by applicable law
  • Processing is necessary to protect your rights or comply with another lawful basis recognised under applicable law

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

  • Operate our online store
  • Remember customer preferences
  • Maintain shopping-cart and checkout functions
  • Measure website traffic and performance
  • Understand how visitors use our website
  • Prevent fraud and protect our website
  • Provide personalised advertising and marketing

We may use services provided by Shopify, Meta, TikTok, Google, Snapchat and other technology partners.

Where required by applicable law, non-essential analytics, advertising and tracking cookies will only be activated after you have provided the required consent through our cookie banner.

You may manage available cookie choices through our cookie banner or your browser settings. Disabling certain cookies may affect the functionality of parts of our website.

5. SHARING OF PERSONAL INFORMATION

We may share relevant personal information with trusted service providers and other parties where reasonably necessary, including:

  • Shopify and website-hosting providers
  • Payment processors and financial service providers
  • Delivery, logistics and courier companies
  • Customer-support providers
  • Email, SMS and WhatsApp communication providers
  • Analytics and advertising platforms
  • Technology and IT service providers
  • Professional advisers, including legal, accounting and financial advisers
  • Government, regulatory, law-enforcement or other authorised authorities where required or permitted by law

We take reasonable steps to ensure that third parties receiving personal information process it appropriately and in accordance with applicable legal requirements.

Some third parties may also process information under their own privacy policies and as independent data controllers where applicable.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers, technology partners or other recipients may process or store personal information outside Kenya.

Where personal information is transferred outside Kenya, we take reasonable steps to ensure that the transfer is carried out in accordance with applicable Kenyan data protection requirements and that appropriate safeguards are in place where required.

Such safeguards may include contractual, organisational, technical or other legally recognised measures.

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

  • Complete orders and provide services
  • Maintain business, financial and accounting records
  • Resolve complaints and disputes
  • Prevent fraud and misuse
  • Comply with legal, tax and regulatory obligations
  • Establish, exercise or defend legal claims

Retention periods may vary depending on the type of information, the purpose of processing and applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal obligations.

8. YOUR DATA PROTECTION RIGHTS

Subject to applicable Kenyan law and any relevant limitations, you may have rights regarding your personal information, including the right to:

  • Be informed about the use of your personal information
  • Request access to personal information held about you
  • Request correction of inaccurate, incomplete or outdated information
  • Request deletion of personal information where legally applicable
  • Request restriction or objection to certain processing
  • Withdraw consent where processing is based on consent
  • Request portability of eligible personal information where applicable
  • Object to direct marketing
  • Make a complaint regarding the processing of your personal information
  • Exercise other rights provided under applicable Kenyan data protection law

To make a privacy or data protection request, please contact us using the details provided in the Contact Us section below.

We may need to verify your identity before processing certain requests. We will respond to valid requests within the timeframe required by applicable law.

9. MARKETING COMMUNICATIONS

Where permitted by applicable law, we may send promotional communications by email, SMS or WhatsApp.

You may unsubscribe from promotional emails by using the unsubscribe link provided in the relevant message.

For SMS or WhatsApp marketing, you may reply with “STOP” or contact our customer-support team.

You may also contact us to request that your personal information not be used for direct marketing.

We may continue to send essential transactional or service-related communications, such as order confirmations, delivery updates, payment information, account notices and other messages necessary to fulfil your order or provide our services.

10. CHILDREN’S PRIVACY

Our website and products are not intended for purchase by children without the involvement of a parent or legal guardian.

We do not knowingly collect personal information directly from children where such collection is prohibited by applicable law.

If you believe that we may have collected personal information from a child unlawfully, please contact us so that we can take appropriate steps.

11. SECURITY OF PERSONAL INFORMATION

We use reasonable administrative, organisational and technical measures intended to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

If we become aware of a personal data breach that is required to be reported under applicable law, we will take appropriate steps to investigate, mitigate and notify the relevant parties and authorities where legally required.

12. THIRD-PARTY LINKS AND SERVICES

Our website may contain links to third-party websites, applications, payment services, social-media platforms or other services.

These third parties may have their own privacy policies and terms of use. We are not responsible for the privacy practices, security or content of third-party websites or services that we do not control.

We encourage you to review the relevant privacy policies before providing personal information to third parties.

13. AUTOMATED DECISION-MAKING AND PROFILING

We may use analytics, advertising and other technologies to understand website activity, customer preferences and interactions with our services.

Where applicable, you will have rights relating to automated decision-making or profiling as provided by Kenyan data protection law.

We will not carry out solely automated decision-making that produces legal or similarly significant effects on you except where permitted by applicable law and subject to any required safeguards.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, services or applicable legal and regulatory requirements.

When we make changes, we will publish the updated version on this page and update the “Last updated” date.

We encourage you to review this Privacy Policy periodically.

15. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have a privacy-related complaint or request, please contact us:

Elyscents International LLC
Kenya

For data protection and privacy requests, please include sufficient information for us to identify your request and, where necessary, verify your identity.

If you are not satisfied with how we handle your personal information, you may have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya, subject to applicable law and procedures.