Eternal International ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect when you use our website, how we use it, and the choices you have.
1. Information We Collect
We collect information you provide directly, as well as information collected automatically:
| Category | Examples |
|---|---|
| Account Information | Name, email address, phone number, password (encrypted) |
| Order Information | Delivery address, items purchased, order history |
| Payment Information | M-Pesa phone number and transaction reference (we never store M-Pesa PINs) |
| Technical Information | IP address, browser type, device information, pages visited |
| Communications | Messages sent via WhatsApp, email, or contact forms |
2. How We Use Your Data
- To process and deliver your orders
- To communicate order updates, confirmations, and support responses
- To improve our website, products, and services
- To send promotional offers (only if you've opted in — you can unsubscribe anytime)
- To detect and prevent fraud or abuse of our platform
- To comply with legal obligations under Kenyan law
3. Sharing of Information
We do not sell your personal information. We may share data with:
- Delivery partners — to fulfill and deliver your orders
- Payment processors (e.g. Safaricom M-Pesa) — to process transactions securely
- Service providers — such as hosting, email, and analytics providers, who are bound by confidentiality obligations
- Legal authorities — where required by law or to protect our legal rights
4. M-Pesa & Payment Security
All M-Pesa transactions are processed through Safaricom's secure STK Push API. We receive only a transaction confirmation, receipt number, phone number, and amount paid — we never have access to your M-Pesa PIN or full account details.
5. Cookies & Session Data
We use session cookies to keep you logged in and to remember items in your shopping cart. These are essential for the website to function and do not track you across other websites.
6. Data Security
We implement industry-standard measures to protect your data, including:
- Encrypted password storage (passwords are hashed, never stored in plain text)
- CSRF protection on all forms
- Restricted admin access with authentication
- Regular security reviews of our systems
While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Opt out of marketing communications at any time
To exercise any of these rights, contact us using the details below.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or how your data is handled, reach out to us:
- WhatsApp: +254 721 789 287
- Email: saleseternalteam@gmail.com
- Address: Nairobi, Kenya