Privacy Policy

Last updated: July 2, 2026

Bikini World ("we", "us", "our") operates bikiniworldkenya.co.ke (the "Site"). This policy explains what personal information we collect, why we collect it, and how we protect it when you browse, create an account, or place an order with us.

1. Information we collect

  • Account details: name, email address and phone number when you register, sign in, or check out — either directly, or via Google Sign-In.
  • Order details: shipping address, items purchased, order value and order history.
  • Payment information: when you pay by M-Pesa, we receive your phone number, the M-Pesa transaction/receipt number and the amount paid via Safaricom's Daraja API. We never see or store your M-Pesa PIN, and we do not collect or store card numbers.
  • Communications: messages you send us via WhatsApp, email or our contact form, so we can respond to enquiries and share order updates.
  • Usage data: pages viewed, cart contents and general device/browser information, collected automatically to keep the Site working (e.g. so items stay in your cart between visits).

2. How we use your information

  • To create and manage your account, and to process and fulfil your orders.
  • To send order confirmations, delivery updates and, where you've opted in, promotional messages.
  • To respond to customer support requests, including over WhatsApp.
  • To detect and prevent fraud, abuse and unauthorised access to accounts.
  • To improve the Site, our product range and the shopping experience.

3. Sign-in with Google

If you choose "Continue with Google", Google shares your name, email address and profile photo with us to create or sign in to your account. We do not receive your Google password. You can review or revoke Bikini World's access at any time from your Google Account permissions page (myaccount.google.com/permissions).

4. Email verification

When you create an account with an email and password, we send a verification link to confirm the address belongs to you. This helps keep accounts secure and ensures order and delivery updates reach the right inbox.

5. Who we share information with

  • Safaricom / M-Pesa — to process mobile money payments.
  • Google Firebase — our hosting, database, authentication and cloud infrastructure provider, which stores data on our behalf.
  • WhatsApp Business — to send order updates and respond to support enquiries you initiate.
  • Delivery partners — your name, phone number and address, solely to deliver your order.

We do not sell your personal information to third parties.

6. Cookies and local storage

We use browser storage (cookies/local storage) to keep you signed in, remember your cart, and remember sign-in preferences such as "Remember me". You can clear these at any time through your browser settings, though some features (like a persistent cart) may stop working.

7. Data retention

We keep account and order records for as long as your account is active, and afterwards for as long as needed to meet our tax, accounting and legal obligations in Kenya.

8. Your rights

You can access, update or delete most of your account details from your Account page at any time. To request a full copy or deletion of your personal data, or to ask any question about this policy, contact us using the details below.

9. Children

The Site is intended for users aged 18 and over. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Bikini World, Kai Plaza, Tom Mboya Nairobi CBD · Iconic Plaza, Nairobi CBD
Email: support@bikiniworld.com
Phone: +254 726 354 496

This policy is provided as a general guide for our customers and is not a substitute for legal advice. If you need this reviewed for formal compliance purposes (e.g. Kenya's Data Protection Act, 2019), please consult a qualified lawyer.