Last updated: 15 October 2026
Norie's Cake Atelier ("we") respects your privacy and processes personal data in line with Kenya's Data Protection Act, 2019 and its regulations.
Who we are
Norie's Cake Atelier, Machakos, Kenya. Contact: hello@norieskitchen.co.ke. [PLACEHOLDER: legal business name and registration details; ODPC registration number if applicable]
What we collect
- Details you give us in forms, WhatsApp, phone or email: name, phone number, email, delivery town or address, event date and order details.
- Basic technical data when you visit the site (such as IP address and browser type), and analytics data if you accept it through Google Site Kit / Google Analytics.
Why we use it (lawful basis)
- To reply to enquiries, quote, take and deliver orders (performance of a contract, or steps before one).
- To keep basic business and tax records (legal obligation).
- To understand how the site is used and improve it (legitimate interest or consent).
We do not sell your data or use it for marketing without your consent.
Who we share it with
Only with people who help us run the business: delivery riders (name, phone, delivery location), our website and email host, and payment providers such as M-Pesa. Google provides maps, reviews and analytics on this site and may process data under its own policies.
How long we keep it
Enquiry and order details are kept for as long as needed to fulfil the order and meet record-keeping obligations, then deleted. [PLACEHOLDER: retention period]
Your rights
Under the Data Protection Act, 2019 you have the right to be informed, to access your data, to object to processing, to correct or delete false or misleading data, and to data portability. Email us to use any of these rights. You may also complain to the Office of the Data Protection Commissioner (ODPC), www.odpc.go.ke.
Security
The site uses HTTPS and our email is hosted on our own server. Access to order details is limited to the people who need it.
Changes
We will update this page if anything changes.