Last updated: 9 October 2026
This policy explains what personal information Ustawi Organic Farms ("Ustawi", "we", "us") collects through the Ustawi mobile app and this website, why we collect it, who we share it with, and the choices you have.
We are based in Kisumu, Kenya, and we handle personal information in line with the Kenya Data Protection Act, 2019.
Account details. When you create an account in the app we collect your first name, last name, email address and phone number. Your password is stored only as a one-way hash; we cannot read it.
Orders. The products you add to your cart and order, the quantities, the order total and the date.
Delivery details. The name, phone number, address, city, county or state and country you give us for a delivery.
Payments. When you pay with M-Pesa we record the phone number you pay from, the amount, the payment status and the M-Pesa transaction reference. Your M-Pesa PIN is entered on your own phone in the M-Pesa prompt and is never seen or stored by us. We do not collect or store card details.
Sign-in security. One-time codes we email you to confirm a login or a password reset (stored in hashed form and deleted once used), and the tokens that keep you signed in.
Technical records. Our servers record the internet address (IP) and the time of requests made to them, which we use to keep the service secure and to investigate faults.
Website analytics. On this website we use Amplitude to understand how pages are used. It records pages viewed and interactions such as clicks, and may record a replay of your visit to the website. This applies to the website only, not to the app.
What the app does not collect. The app does not access your location, contacts, camera, microphone, photos or files, and it does not use an advertising identifier.
We use your information because it is needed to provide the service you asked for (your account and your orders), because the law requires us to keep certain records, because we have a legitimate interest in keeping our service secure and working well, or because you have given your consent. Where we rely on your consent you can withdraw it at any time.
We do not sell your personal information. We share it only with:
Some of these providers store or process information on servers outside Kenya. Where that happens we take the steps the law requires to protect it.
Information sent between the app and our servers is encrypted in transit. Passwords and one-time codes are stored in hashed form, and access to personal information is limited to people who need it to run the service. No system is completely secure, so please use a strong password and keep your login codes private.
We keep your information for as long as your account is open. When you delete your account we delete or anonymise your personal information, except records we are required by law to keep, such as records of completed transactions, which we keep only for as long as the law requires.
You have the right to:
To use any of these rights, email info@ustawiorganicfarms.com. If you are not satisfied with our response you can complain to the Office of the Data Protection Commissioner of Kenya.
You can ask us to delete your account and the personal information linked to it at any time. See how to delete your account.
The app and website are not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
We may update this policy from time to time. The date at the top of this page shows when it was last changed. If a change is significant we will tell you in the app or by email.
Ustawi Organic Farms, Kisumu, Kenya
Email: info@ustawiorganicfarms.com
Phone: +254 794 642859