Last updated: 30 March 2026. This policy describes how SJ-Gems (“we”, “us”) handles personal information when you use our Kenya-focused beauty e-commerce website and related services.
We respect your privacy. This policy is written in plain language. Our registered legal name may appear on formal notices; we trade as SJ-Gems. For privacy questions, contact support@sj-gems.com.
What we collect
Depending on how you use our Services, we may process:
- Account and contact details — for example name, email address, and Kenya phone number when you register, sign in, or place an order.
- Order and payment-related information — items purchased, delivery details, and transaction references. Paystack and other payment providers process payments under their own policies; we typically receive confirmation of payment status rather than your full financial credentials on our servers.
- Communications — messages you send to us (e.g. support or WhatsApp where we offer it) and records needed to assist you.
- Technical and usage data — such as IP address, device or browser type, and pages viewed, to secure the site and improve performance. We may use cookies or similar technologies as described below.
How we use your information
We use personal data to:
- Provide the storefront, process orders, and deliver products;
- Authenticate your account and protect against fraud or abuse;
- Communicate about your orders, service updates, or support;
- Comply with legal obligations applicable in Kenya; and
- Analyse and improve the Services (including optional analytics when enabled — see below).
We do not sell your personal information. Marketing messages, if any, will be sent in line with your preferences and applicable law.
Cookies, local storage, and your cart
We use cookies and similar technologies that browsers and our app stack provide. Some are essential for sign-in, security, or remembering your session. Others may help us understand how the site is used if we enable analytics.
Your shopping cart may be stored in browser local storage (or equivalent) so items persist between visits on the same device. That data stays on your device unless we sync it to our servers as part of an order or account feature. Clearing site data in your browser will remove locally stored cart contents.
Third-party services
We rely on service providers who process data on our behalf under contracts. Examples relevant to this project include:
- Content and commerce data (Sanity) — product information and CMS content may be hosted and delivered via Sanity’s platform; their privacy terms apply to how they handle data on their systems.
- Hosting and infrastructure — our application may run on providers such as Vercel (or similar) so that pages and APIs are served reliably; they may process technical request data (e.g. IP, headers) as part of hosting.
- Authentication — if you sign in with Google or other providers, they receive information according to their policies when you choose that option.
- Analytics — if we enable web or product analytics (e.g. Vercel Analytics or similar), aggregated usage may be processed by those tools to help us improve the site.
We encourage you to read the privacy notices of payment networks (including Paystack and its participating payment providers) when you pay.
Retention
We keep personal data only as long as needed for the purposes above, including legal, tax, and accounting requirements in Kenya, and then delete or anonymise it where appropriate.
Your rights
Under applicable Kenyan data protection law, you may have rights to access, correct, or object to certain processing of your personal data, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise rights or ask questions, contact us at the email below. We may need to verify your identity before responding.
Children
Our Services are aimed at adults. If you believe we have collected data from a child without appropriate consent, contact us and we will take appropriate steps.
International transfers
Some of our providers may process data outside Kenya. Where that happens, we use appropriate safeguards as required by law (such as contractual clauses or provider certifications).
Changes to this policy
We may update this policy from time to time. The “Last updated” date will reflect changes. For material changes, we may provide additional notice on the site or by email.
Contact
Privacy enquiries: support@sj-gems.com.