Privacy Policy
Last updated: August 2026
We collect the minimum data needed to sell and deliver audio gear to you — and we never sell it to anyone. This policy explains what we collect, why, and the choices you have, in line with the Kenya Data Protection Act, 2019.
What we collect
- Order details: name, phone number, delivery county and notes, and items ordered.
- Account details (optional): name, email, phone and a securely hashed password.
- Reviews: the display name, rating and comment you submit.
- Basic analytics: anonymous page views to improve the store.
How we use it
- To process, deliver and follow up on your orders.
- To provide warranty and returns support.
- To publish moderated reviews on product pages.
- To contact you about your order — never for unrelated marketing without your consent.
Who we share it with
Only what is necessary: couriers receive your name, phone and delivery address; payment providers (e.g. Safaricom M-Pesa) process your payment details directly. We do not sell or rent personal data to third parties.
Security
Passwords are hashed with PBKDF2 (never stored in plain text), sessions use signed expiring tokens, and all traffic runs over HTTPS. Admin access is restricted and rate-limited.
Your rights
You can request a copy of your data, correction of inaccuracies, or deletion of your account at any time. Email hello@aurasounds.co.ke or call 0745118588 and we will respond within 7 days.
Cookies
We use a single cookie (or local storage token) to keep you logged in and remember your cart. No advertising or cross-site tracking cookies are used.