Privacy Policy

1. SCOPE AND DATA CONTROLLER

1.1 This Policy applies to personal data processed in connection with the Platform, in Kenya and any other jurisdiction in which All Meats operates, subject to any locally required addenda to comply with local data protection law.

1.2 Data controller. Alphaxerds Enterprises Limited, trading as All Meats, of Nairobi, Kenya (with operations at Hydro Park and Kiambu), is the data controller responsible for personal data processed through the Platform, save where a Vendor acts as an independent controller of Customer data it receives to fulfil an Order (see clause 5).

2. INFORMATION WE COLLECT

2.1 Information you provide

Account details: name, phone number, email address, delivery address(es), password.

Order details: items ordered, order value, delivery instructions, order history.

Vendor/business details: business name, registration and licence numbers, KRA PIN, bank/mobile money payout details, product listings.

Communications: messages to customer support, reviews, ratings, survey responses.

2.2 Information collected automatically

Device and log data: IP address, device type, operating system, browser type, app version, crash logs.

Usage data: pages/screens viewed, search queries, clicks, session duration.

Location data: approximate or precise location, where enabled, to support delivery and "near me" features.

Cookies and similar technologies, as described in our Cookie Policy.

2.3 Information from third parties

Payment confirmation data from M-PESA, Visa/Mastercard processors, and banks (we do not receive or store full card numbers).

Delivery status updates from Delivery Partners and logistics providers.

Identity or business verification data from KYC/AML service providers, where applicable.

3. HOW WE USE YOUR INFORMATION

To create and manage your account and verify your identity.

To process and fulfil Orders, including sharing necessary details with the relevant Vendor and Delivery Partner.

To process payments and prevent fraud, in conjunction with our payment service providers.

To provide customer support and respond to enquiries or complaints.

To send transactional communications (order confirmations, delivery updates, receipts).

To send promotional communications, where you have consented or as otherwise permitted by law, and which you may opt out of at any time.

To maintain the safety, security, and integrity of the Platform, including fraud and abuse prevention.

To improve the Platform, including analytics on usage patterns and, where used, to support automated features such as pricing or recommendations.

To comply with legal, regulatory, and food-safety obligations, including responding to lawful requests from regulators or law enforcement.

4. LEGAL BASIS FOR PROCESSING

We process personal data in reliance on one or more of the following legal bases recognised under the Kenya Data Protection Act, 2019: (a) performance of a contract with you (e.g. fulfilling an Order); (b) your consent (e.g. marketing communications, precise location); (c) compliance with a legal obligation (e.g. tax or food-safety recordkeeping); and (d) our legitimate interests, such as fraud prevention, Platform security, and improving our services, balanced against your rights and interests.

5. HOW WE SHARE YOUR INFORMATION

5.1 Vendors. To fulfil an Order, we share necessary Customer details (name, phone number, delivery address, order contents) with the relevant Vendor(s). Vendors process such data as independent controllers for order-fulfilment purposes only and must not use it for independent marketing without your separate consent.

5.2 Delivery Partners. We share delivery-relevant details (name, phone number, address, delivery instructions) with Delivery Partners or logistics providers to complete delivery.

5.3 Payment processors. Payment details are shared with licensed payment service providers (e.g. M-PESA, card processors) solely to process payment; All Meats does not store full card numbers.

5.4 Service providers. We share data with vetted service providers who support our operations (e.g. cloud hosting, SMS/communication providers, analytics, KYC/AML verification), under contractual confidentiality and data protection obligations.

5.5 Legal and regulatory disclosure. We may disclose personal data where required by law, court order, or lawful request from a regulator, tax authority, or law enforcement agency, or to protect the rights, property, or safety of All Meats, our Users, or the public, including in connection with a food-safety recall or investigation.

5.6 Business transfers. In connection with a merger, acquisition, financing, or sale of assets (including international expansion via an Affiliate), personal data may be transferred as part of that transaction, subject to equivalent confidentiality protections.

5.7 No sale of data. All Meats does not sell personal data to third parties for their own independent marketing purposes.

6. CROSS-BORDER DATA TRANSFERS

Where personal data is transferred outside Kenya (for example, to a cloud service provider or, as All Meats expands, to an Affiliate operating in another country), we take reasonable steps to ensure such transfers comply with the Kenya Data Protection Act, 2019, including verifying that the receiving jurisdiction or party provides adequate data protection safeguards, such as contractual data protection clauses.

7. COOKIES AND TRACKING TECHNOLOGIES

The Platform uses cookies and similar technologies to keep you logged in, remember preferences, and understand usage patterns. Full details, including how to manage cookie preferences, are set out in our separate Cookie Policy, which forms part of this Privacy Policy.

8. DATA RETENTION

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, tax, and food-safety recordkeeping obligations (which may require retention of certain order and traceability records for several years), to resolve disputes, and to enforce our agreements. Where data is no longer needed, we will delete or anonymise it in accordance with our internal retention schedule.

9. DATA SECURITY

We implement reasonable technical and organisational measures (such as encryption in transit, access controls, and staff confidentiality obligations) designed to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify affected Users and the relevant authority of any data breach as required by applicable law.

10. YOUR RIGHTS

Subject to applicable law, including the Kenya Data Protection Act, 2019, you have the right to:

Access the personal data we hold about you.

Request correction of inaccurate or incomplete data.

Request deletion of your personal data, subject to our legal and legitimate business retention needs.

Object to or restrict certain processing, including direct marketing.

Request a copy of your data in a portable format, where technically feasible.

Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in clause 14. We may need to verify your identity before actioning a request, and may decline or limit a request to the extent permitted by law (for example, where retention is required for tax or food-safety recordkeeping).

11. CHILDREN'S PRIVACY

The Platform is not directed at children under 18, and we do not knowingly collect personal data from children without appropriate parental or guardian consent. If we become aware that we have inadvertently collected data from a child without such consent, we will take reasonable steps to delete it.

12. MARKETING COMMUNICATIONS

Where you have consented (or as otherwise permitted by law), we may send you promotional messages via SMS, email, WhatsApp, or push notification. You may opt out at any time using the unsubscribe link, in-app settings, or by contacting customer support; opting out of marketing does not affect transactional communications necessary to fulfil your Orders.

13. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites or services (including Vendor social media pages or external payment gateways) not operated by All Meats. We are not responsible for the privacy practices of such third parties, and we encourage you to review their respective privacy policies.

14. CONTACT US AND COMPLAINTS

If you have questions about this Policy or wish to exercise your data protection rights, please contact us at:

Alphaxerds Enterprises Limited, trading as All Meats

Nairobi, Kenya — with operations at Hydro Park and Kiambu

Email: Sales@allmeats.co.ke

Phone / Support: 0795 199 681

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC).

15. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or as All Meats expands to new markets. The updated version will be posted on the Platform with a revised effective date, and, for material changes, we will provide additional notice (e.g. email or in-app notification).

© 2026 Alphaxerds Enterprises Limited, trading as All Meats. All rights reserved.