Primary Logo

Privacy Policy

Effective Date: 30 July 2026 · Version 2.0

Vyete Technologies Ltd ("Vyete", "we", "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, your rights, and how to exercise them. It applies to all users of the Vyete platform — shoppers, shop operators, brand partners, carriers, and experience providers.

1. Who We Are

Vyete Technologies Ltd is the data controller for personal data processed via the Vyete platform. Our Data Protection Officer can be reached at [email protected]. For our current registered address, contact [email protected].

2. Data We Collect

2.1 Data You Provide

  • Account data: Name, email address, phone number, and password hash when you register.
  • Profile data: Delivery addresses, saved payment method tokens, and preferences.
  • Order data: Items ordered, delivery instructions, and communication with shops or carriers.
  • Reviews and content: Text, ratings, and images you submit on the Platform.
  • Identity verification: Government-issued ID where required for age-restricted products.
  • Support communications: Messages sent to Vyete customer support.

2.2 Data Collected Automatically

  • Usage data: Pages visited, search queries, clicks, and time spent on the Platform.
  • Device data: IP address, browser type and version, operating system, and device identifiers.
  • Location data: Approximate location derived from IP address; precise location only if you grant permission.
  • Cookies and similar technologies: As described in our Cookie Policy.

2.3 Data From Third Parties

  • Payment processors: Transaction status and fraud signals (we do not receive full card numbers).
  • Social login providers: Basic profile information if you log in via a social account.
  • Carriers: Delivery status updates and GPS scan data linked to your order.

3. How We Use Your Data

| Purpose | Legal Basis | |---|---| | Processing and fulfilling orders | Contract performance | | Account management and authentication | Contract performance | | Sending order confirmations and delivery updates | Contract performance | | Preventing fraud and ensuring platform security | Legitimate interest | | Improving Platform features and performance | Legitimate interest | | Personalising recommendations and offers | Legitimate interest (or consent where required) | | Sending marketing communications | Consent | | Complying with legal obligations | Legal obligation | | Resolving disputes and enforcing terms | Legitimate interest / Legal obligation |

4. How We Share Your Data

Vyete does not sell your personal data. We may share data with:

4.1 Shops and Brands

Order details (name, address, items, and contact number) are shared with the shop fulfilling your order and, where necessary, the brand that supplied the product for warranty or recall purposes.

4.2 Carriers

Your name, delivery address, and contact number are shared with the verified carrier assigned to your delivery.

4.3 Service Providers

We engage third-party processors under data processing agreements for: cloud hosting, payment processing, fraud detection, analytics, and customer support software.

4.4 Legal Disclosure

We may disclose your data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Vyete, its users, or the public.

4.5 Business Transfers

If Vyete is involved in a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity, subject to the same protections.

5. International Transfers

Where your data is transferred outside your country of residence, Vyete ensures adequate safeguards are in place (such as Standard Contractual Clauses or equivalent mechanisms) in compliance with applicable data protection law.

6. Data Retention

We retain your personal data for as long as your account is active plus the period needed to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods by category are available on request.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access a copy of the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data where we no longer have a lawful basis to process it — completed within 21 days of your request (see below).
  • Restrict processing while a dispute is pending.
  • Data portability — receive your data in a machine-readable format.
  • Object to processing based on legitimate interest or for direct marketing.
  • Withdraw consent at any time where processing is consent-based.
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya's data protection authority, or with your local data protection authority if you are located in the UK or EU/EEA.

Submit a request through the Data Privacy section of your account at id.vyete.com, or by email to [email protected]. See our Data Rights Request Procedure for step-by-step instructions and response timeframes.

Note

Access and Portability requests submitted at id.vyete.com are fulfilled immediately by email. Erasure (account deletion) requires additional identity verification via a one-time code, disables your account immediately, and permanently deletes it 21 days later — with a cancellation link in the confirmation email in case you change your mind. See the Data Rights Request Procedure for the full mechanics, including what's deleted versus anonymised.

8. Privacy Controls on vyete.com

In addition to your statutory data rights (Section 7), you can manage social privacy preferences directly from Settings → Privacy at vyete.com. These controls are effective immediately and do not require a formal data request:

| Control | What it does | |---|---| | Follow gating | Choose whether anyone can follow you automatically or whether you must approve each follow request. | | Direct message permissions | Control who can send you direct messages — everyone, people you follow, or no one. | | Activity visibility | Choose whether your recent activity is shown on your public profile. |

These settings affect how other users interact with you on the Platform. They do not affect how Vyete processes your personal data for the purposes described in Section 3.

9. Children's Privacy

The Platform is intended for use by people aged 18 and over (see the eligibility requirement in the Terms of Service). Vyete does not currently verify age at registration, and does not knowingly collect personal data from children. If you believe a child has provided data to us, contact [email protected] and we will investigate and delete it promptly.

10. Security

Vyete implements appropriate technical and organisational measures including encryption in transit (TLS), encryption at rest, access controls, and regular security assessments. No system is completely secure; you should use a strong, unique password and enable two-factor authentication.

11. Changes to This Policy

Material changes will be communicated by email or in-Platform notice at least 14 days before they take effect. The current version will always be accessible at the URL of this page.

12. Contact

Data Protection Officer: [email protected]

Registered address: Contact [email protected] for our current registered address.