Privacy statement
Last updated: 26 September 2026
This statement explains how information is used in ThriveTill’s account, shop-management and online-store features. Contact info@thrivetill.com or 0724 040 350 with privacy questions or requests.
1. Information in the service
Account information includes names, email addresses, registered phone numbers, password hashes and shop-role assignments. Shop records include business details, branding, products, inventory, orders and recorded payment status. Online orders can include customer names, contact information, delivery addresses and instructions. Session and security records may include IP addresses, browser information and request logs.
The current service does not collect card numbers or M-Pesa PINs. Recording a payment method is not the same as processing an online payment.
2. Why we use information
We use account and session information to sign users in, enforce permissions and protect access. Shop and order information supports sales, inventory, fulfillment and reporting. Contact information lets us respond to enquiries and service requests. Processing may be necessary to provide the requested service, meet legal obligations or pursue legitimate service and security purposes. Where consent is required, it should be obtained before the relevant processing.
3. Shop owners and customer information
Shop owners determine how they use staff and customer data in their business and are responsible for their own privacy notices and lawful collection. ThriveTill processes shop records to provide the software. Authorised shop staff can access information according to their assigned permissions; platform super users can administer shops. Customers should contact the shop first about their order or its fulfillment.
4. Access and service providers
Information may be accessed by authorised people supporting the service, providers needed to operate it, or authorities where disclosure is legally required. Hosting or other providers used in a deployment may process data outside Kenya; any such arrangement must use the safeguards required by applicable law. Contact us for details of the providers and hosting arrangements relevant to your account. Shop content and published storefront policies are publicly visible; private account and order records are not public storefront content.
5. Cookies and browser storage
ThriveTill uses session and security cookies for sign-in and request protection. Browser storage is used for local preferences such as receipt-printing settings. These marketing pages do not include advertising trackers or an analytics script. If optional tracking is introduced, this statement and any required choice mechanism will be updated.
6. Security and retention
Passwords are stored as hashes. Shop access is checked on the server, and password changes invalidate other sessions using the previous credentials. Keep your passwords and devices secure. No system can guarantee absolute security. Information should be retained only as needed for the service, legitimate record keeping and applicable legal requirements. Contact us about closure or deletion; business records and backups may require different handling, which should be explained when responding to a request.
7. Your choices and rights
Depending on applicable law, you can ask to access or correct your information, object to processing, and request deletion, restriction or a portable copy where those rights apply. We may need to verify your identity and consider legal record-keeping duties or other people’s rights before acting. Send requests to info@thrivetill.com.
You can also raise concerns with Kenya’s Office of the Data Protection Commissioner. Its guidance explains data-subject rights and the principles governing personal information.
8. Updates
We will revise this statement when the service or its data practices change and update the date above. Material changes should be communicated to affected users as appropriate.