Your privacy matters

1 What we collect

When you create an account, place an order, contact us or sign up as a partner, we collect only what we need to serve you:

• Your name, email address and phone number
• Your delivery address or pickup choice, and the items you order
• Your password, stored only as a secure one-way hash (we can never see it)
• If you use "Sign in with Google": your name, email address and Google account identifier
• For partners: payout details such as an M-Pesa number, so we can pay your commission
• Basic technical data your browser sends (for example IP address and device type) to keep the site secure and working

2 How we use it

We do not sell your personal information.

• To process and deliver your orders, confirm payments and send order updates
• To handle support tickets, returns and refunds
• To keep your account and our website secure, and to prevent fraud and abuse
• To run the partner programme and calculate commissions
• To improve the shop — for example which products are popular and how fast pages load

3 Who we share it with

We share information only where it is needed to deliver what you asked for:

We may also disclose information when the law requires it.

• Our payment provider (Kopo Kopo / M-Pesa) to process your payment — we never see or store your M-Pesa PIN
• Delivery partners, so your order reaches you
• Email and messaging services we use to send receipts and order updates
• Google, if you choose to sign in with Google

4 Cookies and sessions

We use small cookies and browser storage that are essential to the shop: keeping you signed in, remembering your cart and protecting forms from forgery. We do not use them to sell advertising.

5 How we protect your information

Passwords are hashed, administrator accounts support two-step verification, sign-in attempts are rate-limited and the site is served over HTTPS. No system is perfectly secure, but we work to keep your data safe and limit access to the people who need it.

6 How long we keep it

We keep order and payment records for as long as needed for accounting, warranty and legal reasons. Account details are kept while your account is active. You can ask us to delete your account at any time (see below).

7 Your rights

Under the Kenya Data Protection Act, 2019, you can ask us to:

You can update most details yourself in My Account, or contact us and we will help.

• Show you the personal data we hold about you
• Correct anything that is wrong or out of date
• Delete your data, or restrict how we use it, where the law allows

8 Changes to this policy

If we change how we handle personal information, we will update this page and the date above.

Questions? Email info@axionsports.co.ke or call / WhatsApp +254 759 861 981.