Privacy Policy — Simpli Cosmetics Kenya
Effective date: 23 August 2026
At Simpli Cosmetics Kenya (“we,” “our,” “us”), your privacy matters. This Privacy Policy explains how we collect, use, share, protect and retain personal information when you shop with us, use our website, or visit our Nairobi store.
Quick Summary
We collect data needed to operate orders, support customers and improve the Simpli experience.
We do not sell your personal information.
You can request access, correction or deletion of your personal data.
You can opt out of Simpli first-party behavioral analytics on your browser.
Our first-party session replay masks form fields and excludes payment credentials.
1. Information We Collect
Depending on how you interact with Simpli, we may collect:
Personal and delivery details: name, phone number, email address, billing address and shipping/delivery address, including street address where provided at checkout.
Order details: products ordered, order value, currency, order status and transaction records. We do not copy full card details, M-Pesa PINs, one-time passwords or other payment credentials into our behavioral analytics system.
Website and device data: pages viewed, clicks or taps, scrolling, browser and device type, referral source, campaign/UTM parameters, search interactions, cart and checkout journey events, technical errors and performance signals. Traffic, security or third-party analytics tools may also process IP addresses in accordance with their purpose and configuration.
Marketing preferences: subscription or consent choices for newsletters, promotions, advertising or WhatsApp updates.
2. How We Use Your Information
We use information to:
process, fulfill and support orders;
provide customer service and delivery troubleshooting;
communicate order updates;
send marketing where the required permission applies;
understand website journeys, usability problems, search behavior and checkout friction;
improve our website, services and product discovery;
protect the site from abuse and investigate technical incidents; and
comply with applicable legal obligations.
3. How We Share Your Information
We do not sell your personal data.
We may share information with service providers only where needed for their role, including delivery couriers, payment processors, hosting/technical providers and approved marketing or analytics platforms. We may also disclose information where required by law or needed to protect against fraud, abuse or security threats.
4. Your Rights
Subject to applicable Kenyan data-protection law, you may request access to your personal data, correction of inaccurate data, deletion where applicable, or withdrawal of consent for consent-based processing. You can also opt out of promotional communication.
To exercise a data right, contact info@simplicosmetics.co.ke. We may need enough information to verify the request and locate the relevant records.
5. Data Security
We use reasonable administrative and technical safeguards designed to protect personal information against loss, misuse or unauthorized access. Checkout identity stored inside Simpli Behavior Intelligence is kept separately from replay data and encrypted at rest by the application. Sensitive payment credentials are not recorded by that system.
6. Cookies, Behavioral Analytics & Session Replay
We use cookies and first-party browser identifiers to maintain features such as carts and to understand how the website is used.
Simpli Behavior Intelligence records first-party behavioral events such as page views, product views, clicks/taps, scrolling, search activity, cart and checkout journey events, interaction friction, browser errors and performance signals. It uses pseudonymous visitor and session identifiers rather than a person’s name as the default analytics identity.
Where replay is enabled, we may reconstruct a masked session replay from sanitized page structure and interaction events so that we can diagnose usability problems. The replay system clears form values and masks checkout, billing, shipping, account and payment areas. Passwords, card details, M-Pesa PINs, OTPs and other payment credentials are not captured by the replay layer.
When an actual WooCommerce order is created, Simpli may link that order’s checkout identity — including name, email, phone number, billing address and shipping/delivery street address — to the relevant analytics session for order-journey analysis, customer support, delivery troubleshooting and service improvement. This linked identity is not treated as session-replay content and does not replace WooCommerce as the authoritative order/customer record.
The current first-party analytics configuration records eligible behavioral events and replay at full sampling. Raw replay is normally retained for up to 30 days, raw behavioral events for up to 90 days, and linked session/identity analytics for up to 180 days, subject to legal, security, dispute, operational or data-rights requirements.
You can opt out of Simpli first-party behavioral analytics on this browser by visiting Turn Simpli behavioral analytics off. You can re-enable it using Turn Simpli behavioral analytics on. Browser-level settings and supported consent controls may also affect analytics operation.
7. Traffic, Advertising & Third-Party Analytics
We may use separate tools for aggregate traffic measurement, advertising attribution, ecommerce measurement or technical support. Those tools operate under their own configurations and purposes. Simpli Behavior Intelligence does not automatically treat third-party analytics observations as customer, order, payment, skincare-suitability or preference truth.
8. Data Retention
Different records have different retention needs. Order and accounting records may be retained as required for fulfillment, support, tax, legal or dispute purposes. Behavioral analytics follow the retention periods described above. When a valid deletion request applies, we delete or de-identify relevant records subject to lawful exceptions and system-of-record requirements.
9. Children’s Privacy
Our services are not intended for children under 18. We do not knowingly collect personal data from children for independent commercial profiling.
10. International Data Transfers
Some approved service providers may process data outside Kenya. Where this occurs, we use the provider only within applicable contractual, privacy and security requirements.
11. Changes to This Policy
We may update this Privacy Policy when our systems, providers, legal obligations or operating practices change. Material changes will be reflected on this page with an updated effective date.
12. Contact Us
Visit: Iconic Business Plaza, Moi Avenue, Nairobi
Website: www.simplicosmetics.co.ke
Email: info@simplicosmetics.co.ke
Phone: 0712 164242
WhatsApp: 0788 004242
This notice describes how Simpli handles personal information; it does not limit data-protection rights that apply under law.
Optional analytics and advertising measurement
Simpli uses optional analytics and advertising technologies to understand how the website performs and whether advertising leads to site activity or purchases. These technologies may include Google Analytics and Google Ads, and Meta Platforms technologies such as the Meta Pixel and the Conversions API.
When you allow optional tracking, the information used for measurement may include events such as page activity or a purchase, the event time, order value and currency, browser or device signals, and—where permitted and available—contact identifiers such as an email address or phone number that are transformed before transmission for matching. We do not use private skincare-concern text, routine details, health or diagnosis information, WhatsApp message content, customer photographs, passwords, PINs or payment-card secrets for advertising measurement.
Optional analytics and advertising tracking is not required to place an order or receive customer service. You can reject it or change your choice using the Privacy choices control on the website. Where optional advertising measurement is enabled, relevant data may be disclosed to the advertising or analytics provider for measurement and attribution and may be processed outside Kenya subject to the applicable safeguards and our data-protection obligations.
We use the minimum information reasonably necessary for the stated measurement purpose. Your data-protection rights described in this policy—including objection, access, correction and deletion where applicable—continue to apply.