Privacy Policy

Binti Marvels Ltd is a women-owned social enterprise based in Nairobi, Kenya. We provide menstrual-care products and related support through our Binti and Mrembo brands. This policy explains how we collect, use, store, share, and delete personal data from our website, WhatsApp, Facebook, Instagram, Meta-connected apps, checkout forms, stockist forms, CSR enquiries, and customer-support channels.

Business contact

• Legal business name: Binti Marvels Ltd
• Location: Mirage Towers, Westlands, Nairobi, Kenya
• Email: binti@bintimarvels.com
• Phone/WhatsApp: +254 717 345 841

What we collect

We only collect data needed to serve you or respond to your request. This may include:

• Name, phone/WhatsApp number, email address, county, and delivery location.
• Order details, selected products, payment confirmation status, delivery notes, and support history.
• Stockist, reseller, CSR, school, NGO, or partnership enquiry details.
• Consent preferences for order updates, marketing messages, reorder reminders, or community follow-up.
• Basic website analytics such as pages visited, approximate device/browser type, referral source, and cookie preferences.
• Meta/Facebook/Instagram app data only when you interact with our Meta-connected pages, adverts, forms, messages, or login/review flows.

We do not intentionally collect sensitive health data, period-cycle dates, or information about minors through this website unless a future form clearly explains the purpose and requests explicit consent. School, CSR, and donation enquiries should be submitted by responsible adults or authorised organisations.

How we use your data

• To confirm orders, delivery, payment, returns, customer support, and product availability.
• To respond to stockist, wholesale, CSR, school, NGO, partnership, or media enquiries.
• To send WhatsApp/SMS/email order updates when you request a product or service.
• To send marketing, community, or reorder reminders only where you have opted in.
• To maintain consent logs, opt-out records, fraud prevention, accounting, and legal compliance.
• To improve our website, customer journey, product planning, and social-media campaigns.

WhatsApp, SMS, and marketing consent

Transactional messages are limited to the order or enquiry you started. Marketing messages, reorder reminders, and community updates require separate optional consent. You can opt out at any time by replying STOP to our WhatsApp/SMS messages or by contacting us directly.

Cookies and analytics

We may use functional cookies for cart, checkout, security, and cookie-preference settings. If analytics or advertising pixels are added, they should be used to measure campaigns and improve service, not to sell personal data. You can limit cookies through your browser settings.

Sharing and processors

We do not sell your personal data. We may share only what is necessary with:

• Delivery riders/couriers who need delivery contact and location details.
• Payment, accounting, CRM, email, SMS, WhatsApp Business, Meta, hosting, analytics, and automation providers who help us operate the service.
• Professional advisers, regulators, or law-enforcement agencies when required by law.

Retention

We keep customer and consent records only for as long as needed for service, legal, tax, accounting, dispute-resolution, fraud-prevention, and opt-out obligations. Marketing consent records and suppression/STOP records may be kept so we can prove consent status and avoid messaging people who opted out.

Your rights under Kenya data protection law

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. To make a request, email binti@bintimarvels.com or WhatsApp +254 717 345 841. We may need to verify your identity before acting on a request.

Meta/Facebook app data deletion

If you reached us through Facebook, Instagram, Messenger, WhatsApp, Lead Ads, or another Meta-connected app and want your app-related data deleted, visit /data-deletion or /data-request for instructions.

Policy updates

We may update this policy when our services, legal requirements, or technology providers change. The latest version will always be available on this page.