Privacy policy
Farma360 collects as little as possible: a name and a phone number, and only when you choose to submit an order form. This page explains what happens to it.
What we collect
When you submit an order form: your name and your phone number. Nothing else. We do not ask for an address on this site, we do not ask for an ID number, we do not ask for an email address, and we never ask for card or M-Pesa details at any point.
Automatically: standard server request data — IP address, browser type, the page requested and the time — which is used to deliver the site, to protect it from abuse, and, in the case of the IP address, to accompany an order so the supplier's system can process it.
In your browser: if you arrive with campaign parameters in the link, they are stored in your browser's local storage so an order submitted later in the session carries the correct attribution. That information stays in your browser and is sent only with an order you submit.
What we do not do
- We do not use advertising cookies, tracking pixels or third-party analytics scripts on this site.
- We do not sell, rent or trade your data.
- We do not run marketing SMS or email campaigns from this site.
- We do not build profiles about you across other websites.
Who your details are shared with
When you submit an order form, your name, phone number and the product you selected are transmitted to the supplier that distributes that product in Kenya, so their call centre can contact you to confirm the order. This is the entire purpose of the form and there is no way to order without it.
That supplier is a separate company and becomes the data controller for the order it creates, including the delivery address you give on the call and the courier arrangement. Their own retention and handling rules apply to that record. If you want your details removed from a supplier's system, tell the agent on the call, and write to us as well so we can follow it up.
Legal basis and your rights
We process your name and phone number in order to act on a request you made — the request to be called back about an order. Under Kenya's Data Protection Act, 2019 you have the right to be informed about how your data is used, to access it, to have inaccurate data corrected, to object to processing, and to request deletion. To exercise any of those, write to support@farma360.co.ke from the context of the order concerned.
How long we keep it
Order submissions are retained only as long as needed to pass them to the supplier and to resolve any problem with the order, and are then deleted. Server request logs are short-lived and are used for delivery and abuse prevention only.
Security
The site is served over HTTPS. Order submissions are transmitted over encrypted connections. Supplier credentials used to pass orders on are held as server-side secrets and are never present in the pages your browser downloads.
Children
This site and the products listed on it are for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted details, write to us and we will delete them.
Changes
If this policy changes materially we will update this page. Continued use of the site after a change means the current version applies. Questions: support@farma360.co.ke.