Darim Luxe CosmeticsNakuru
Legal

Privacy Policy

Last updated: 7 July 2026

Darim Luxe Cosmetics ("Darim Luxe", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect through darimluxe.com (the "Site"), how we use it, and the rights you have under the Kenya Data Protection Act, 2019 ("the Act"). By using the Site or placing an order, you consent to the practices described here.

1. Information We Collect

We collect the following categories of information:

  • Identity and contact data: name, phone number, email address, delivery and billing address.
  • Order data: products purchased, order value, order history, and delivery preferences.
  • Payment data: our payment processor, IntaSend, collects and processes your card or M-Pesa details directly to complete transactions. Darim Luxe does not receive or store your full card number, CVV, or M-Pesa PIN.
  • Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
  • Communications: messages you send us via email, WhatsApp, or contact forms, and any product reviews or feedback you submit.

2. How We Use Your Information

We use personal data to:

  • Process and deliver your orders, and communicate with you about them (confirmations, delivery updates, issues);
  • Provide customer support and respond to enquiries;
  • Improve the Site, our product range, and the overall shopping experience;
  • Send you marketing communications about new products or offers, where you have opted in — you may unsubscribe at any time;
  • Detect and prevent fraud, abuse, or security incidents;
  • Comply with legal or regulatory obligations, including tax and consumer protection requirements.

3. Cookies and Similar Technologies

The Site uses cookies to remember your cart, preferences, and login state, and to understand how visitors use the Site (analytics). You can control or disable cookies through your browser settings; doing so may limit some features, such as remembering items in your cart.

4. Payment Processing

All payments on the Site are handled by IntaSend, a licensed payment service provider operating in Kenya. When you check out, you are directed to IntaSend's secure payment flow, which is governed by IntaSend's own privacy policy and security standards (including PCI-DSS compliance for card payments). Darim Luxe only receives confirmation that a payment was successful, along with the transaction reference — not your full payment credentials.

5. How We Share Your Information

We do not sell your personal data. We share information only with:

  • Delivery and courier partners, to the extent needed to fulfil your order;
  • IntaSend, to process payments;
  • Service providers who support our operations (for example, website hosting or email services), under confidentiality obligations;
  • Regulators or law enforcement, where required by law, court order, or to protect our legal rights or the safety of others.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including any period required to meet legal, accounting, or tax obligations under Kenyan law. Order records are typically retained for at least seven years for tax purposes; you may request deletion of other personal data (such as marketing preferences) at any time, subject to Section 8.

7. Data Security

We apply reasonable technical and organisational measures — such as restricted access, secure hosting, and encrypted checkout via IntaSend — to protect your personal data against loss, misuse, or unauthorised access. No system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

8. Your Rights Under the Data Protection Act, 2019

As a data subject under Kenyan law, you have the right to:

  • Be informed of how your data is used (as set out in this Policy);
  • Access the personal data we hold about you;
  • Request correction of inaccurate or outdated data;
  • Request deletion of your data, subject to our legal retention obligations;
  • Object to or restrict certain processing, including direct marketing;
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at darimluxe@gmail.com. We will respond within the timeframes required by the Act.

9. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal data from individuals under 18 years of age without the involvement of a parent or guardian. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Third-Party Links

The Site may contain links to third-party websites (for example, social media pages). We are not responsible for the privacy practices or content of those third-party sites, and we encourage you to review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date above reflects the most recent revision. Material changes will be highlighted on the Site.

12. Contact Us

For any questions about this Privacy Policy or how your data is handled, contact:

Note: This document is a general template and has not been reviewed by a lawyer. For a business processing customer payment and personal data, we recommend having it reviewed by a Kenyan advocate familiar with the Data Protection Act, 2019 before publishing, and registering with the ODPC as a data controller/processor if required.

For questions about this Privacy Policy, please contact us.