Skip to content

Policy

Privacy

What we collect, why we collect it, who helps us handle it, and what you can ask us to do. We collect as little as we can.

Last updated October 2026

Who is responsible

Jaghet (“we”, “us”) is a business based in Kenya that sources jackets from different places and sells and resells them online. We are responsible for the personal information described here.

This policy covers the Jaghet website at https://jaghet.com and the Jaghet account you can create on it, including signing in with Google.

Contact for privacy questions and requests: Jaghet, Kenya. Phone or WhatsApp: +254 706 085 240. You can also use the contact section on our help page.

What we collect

  • Newsletter. If you join the list, your email address.
  • Your account. Your email address, and your name. If you sign in with Google we receive your name, email address and profile photo from Google, only after you choose to sign in that way. We ask for nothing more.
  • Orders. When you buy: your name, email address, phone number, delivery address, what you ordered, the amounts, and whether the payment succeeded. We do not see or store your card number or M-PESA PIN. Paystack handles those.
  • History. If you choose to appear in History: the photo you give us, a place name (city and country), and whether you want to be shown publicly or anonymously.
  • Messages. What you send us on WhatsApp or by phone, so we can answer you.
  • Technical data. Our hosting provider records basic technical details such as your IP address and browser type, to deliver the site and keep it secure.

Google sign-in and your Google data

You can create an account and sign in with your Google account. This is how that works, and what we do with your Google data:

  • What we receive from Google. Your name, your email address and your profile picture. We request only these three, through Google’s standard sign-in. We do not ask for, and cannot see, your Gmail, Google Drive, Calendar, contacts or anything else in your Google account.
  • What we use it for. To create your Jaghet account and sign you in, to greet you by name and show your picture on the site, and, once the shop opens, to connect your orders and saved addresses to your account and contact you about them. We use it for nothing else.
  • Where it is stored. In our database, hosted with Supabase. It can be seen by you and by the people who run Jaghet, and nobody else.
  • Who it is shared with. We do not sell your Google data, we do not use it for advertising, and we do not share it with anyone except the service providers listed below that help us run the shop.
  • Google’s rules. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • How long we keep it. For as long as your Jaghet account is open. If you ask us to delete your account, we delete your name, email address and profile picture, and anything else tied to your account, within 30 days. We may keep order and payment records for as long as the law requires, and those do not include your Google profile picture.
  • Deleting it. Ask us through the contact section and we will delete your account and the Google data held in it. You can also remove Jaghet’s access at any time in your Google account permissions.
  • How it is protected. See “How we protect it” below. In short: it travels over encrypted connections, it is stored in an access-controlled database, and only you and the people who run Jaghet can see it.

Why we use it

  • To run your account and handle your orders, deliveries, alterations and repairs.
  • To take payments and answer your questions.
  • To send you the newsletter, only if you signed up for it.
  • To keep the site secure and to meet our legal and accounting duties.

We do not sell your information, and we do not show advertising.

Who helps us handle it

These providers process information on our behalf, only for the purposes above:

  • Supabase: our database and sign-in. Our database is hosted in Mumbai, India.
  • Paystack: payments by M-PESA and card.
  • Google: sign in with Google, and address search at checkout once the shop opens.
  • Resend: emails such as order confirmations and sign-in links.
  • Cloudflare: hosting and delivering the website.
  • Couriers and riders: your name, phone number and delivery address, so your order can reach you.

Some of these providers handle information outside Kenya. We send each of them only what it needs to do its job.

Cookies and your browser

We use your browser’s local storage to keep you signed in and, once the shop opens, to remember your bag. We do not use advertising cookies or third-party trackers. Google’s own sign-in page may set its own cookies while you are on it.

How long we keep it

We keep your information while your account is open, and for as long as we need it to handle orders, alterations and repairs and to meet legal and accounting requirements. Newsletter emails stay on the list until you ask us to remove you.

How we protect it

  • Encrypted in transit. Every page and every request to our database uses HTTPS, so what you send us cannot be read on the way.
  • Access-controlled storage. Your information is held in a managed database with row-level access rules that limit what each person can see: you can see your own account and orders, and nobody else’s.
  • Limited access. Only the people who run Jaghet can reach the database, and the keys that give full access are kept on the server side and never placed in the website itself.
  • No passwords from Google. When you sign in with Google, Google checks your identity. We never receive or store your Google password.
  • Payments. Handled by Paystack, not by us. We never see or store your card number or M-PESA PIN.
  • If something goes wrong. If we learn of a breach that puts your information at risk, we will tell the people affected and the Office of the Data Protection Commissioner, as Kenya’s Data Protection Act requires.

Your rights

Under Kenya’s Data Protection Act, 2019, you can ask us to:

  • show you the personal information we hold about you;
  • correct anything that is wrong;
  • delete your information;
  • stop or limit how we use it;
  • give you a copy of it.

You can also withdraw your consent at any time, for example for the newsletter or for a History photo. To do any of this, use the contact section. If you are not happy with how we have handled your information, you can complain to the Office of the Data Protection Commissioner in Kenya.

Changes

We may update this page. The date at the top shows when it last changed.