Privacy policy
What we collect when you shop with us, why we need it, and who we share it with. Last updated 30 September 2026.
Who we are
Boardgames & Cardgames Kenya is an online game shop based at Royal Palm Mall, Wing A, 4th Floor, Shop AT4, Nairobi. This website is boardgamesandcardgameskenya.co.ke. When this policy says "we" or "us", it means us.
For any privacy question, email boardgamescardgames@gmail.com or call or WhatsApp 0727 997511.
What we collect
When you order: your name, phone number, email address, delivery address or pickup choice, any order note you write, and what you bought.
When you use the contact form: your name, location, phone number and the game you asked about.
When you message us on WhatsApp, call or email: your number or email address and what you tell us.
When you browse: our web server keeps standard technical logs such as your IP address, browser type and the pages you opened. These are used for security and to keep the site working.
Payments
Card and M-Pesa payments are handled by Paystack. You enter your card or M-Pesa details on Paystack's secure payment window, not on our site, and we never see or store your full card number or PIN.
Paystack tells us whether the payment succeeded and gives us a payment reference. Paystack's own privacy policy explains how they handle your payment details.
How we use it
To process, deliver and support your order, including calling or messaging you about delivery.
To send order emails: your order confirmation and updates.
To answer your questions and game requests.
To keep records we are required to keep, such as sales records for tax.
To protect the site from fraud and attacks.
We don't sell your personal data. We don't send marketing messages unless you ask us to.
Who we share it with
Only the people and services needed to get your order to you: our delivery riders and couriers (your name, phone and address), Pick Up Mtaani or Super Metro if you choose them, Paystack for payments, and our web hosting and email providers, which store the website and its emails.
We may also share information if the law requires it.
Cookies
The site uses a few small cookies that make the shop work: they remember what is in your cart and keep your checkout secure. We don't use advertising or tracking cookies, and we don't run analytics tools on the site.
How long we keep it
Order records are kept for as long as Kenyan tax and business law requires, usually up to 7 years. Contact form messages are kept for up to 12 months. Technical logs are deleted automatically after a short time.
Your rights
Under Kenya's Data Protection Act, 2019, you can ask to see the personal data we hold about you, ask us to correct it, or ask us to delete it where we don't need to keep it by law. You can also object to us using it.
Email boardgamescardgames@gmail.com and we will reply within 7 days.
If you are unhappy with how we handled your data, you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
Keeping it safe
The site runs on a secure (HTTPS) connection, payments go through Paystack, and access to order details is limited to the people who run the shop.
Children
Our shop is for adults placing orders. Some games are for ages 18 and over. We don't knowingly collect personal data from children.
Changes to this policy
If we change how we use your data, we will update this page and the date at the top.
Questions?
Ask us about your data
Message us and a real person will answer.