Privacy Policy

The Textile Loft

Last updated: [insert date]

The Textile Loft ("we," "us," "our") operates thetextileloft.com (the "Site"). This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under Kenya's Data Protection Act, 2019 ("the Act").

By using the Site, subscribing to our emails, or placing an order, you agree to the practices described in this policy.


1. Who We Are

The Textile Loft is a Kenya-based fashion design, manufacturing, and retail business.

  • Address: Village Market, 1st Floor, New Wing, Nairobi, Kenya
  • Phone: +254 717 048 713
  • Email: thetextileloft@gmail.com

We are the "data controller" for the personal data described in this policy, as defined under the Act. [Insert ODPC registration number once registered with the Office of the Data Protection Commissioner, if applicable.]

2. What Personal Data We Collect

We collect personal data in the following ways:

When you place an order:

  • Name, email address, phone number, delivery/billing address
  • Order details and payment confirmation (payment card details are processed directly by our payment provider — we do not store your card details)

When you subscribe to our newsletter:

  • Email address, and optionally your name

When you contact us (email, Instagram, TikTok, WhatsApp, or in person):

  • Your name, contact details, and the content of your message

When you browse the Site:

  • Device and browser information, IP address, and cookies (see Section 7)

When you create an account:

  • Account login details, order history, and saved preferences

We only collect data that is relevant to the purpose it's collected for, and we do not collect more than we need.

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders, including delivery and customer service
  • Send you marketing emails, if you have opted in (new arrivals, promotions, restocks, brand updates)
  • Respond to enquiries and provide customer support
  • Improve the Site, our products, and your shopping experience
  • Comply with legal and tax obligations
  • Detect and prevent fraud

We do not use your data for automated decision-making that produces legal or similarly significant effects on you.

4. Legal Basis for Processing

Under the Act, we process your data based on one or more of the following:

  • Consent — for marketing emails and non-essential cookies, which you can withdraw at any time
  • Contract — to fulfil an order you have placed with us
  • Legal obligation — for tax, accounting, and consumer protection requirements
  • Legitimate interest — for basic Site security and fraud prevention, where this doesn't override your rights

Consent for marketing is always separate from, and never a condition of, completing a purchase.

5. Email Marketing: Subscribing and Unsubscribing

If you subscribe to our mailing list, we use your email address solely to send you the marketing content described above.

To unsubscribe at any time:

  • Click the "unsubscribe" link at the bottom of any marketing email, or
  • Email us at thetextileloft@gmail.com with "Unsubscribe" in the subject line

We will stop sending marketing emails within a reasonable time of your request. You may still receive transactional emails related to an order (e.g. order confirmations, shipping updates) even after unsubscribing from marketing, as these are not marketing communications.

6. Who We Share Your Data With

We share personal data only where necessary, with:

  • Shopify — our e-commerce platform provider, which hosts the Site and processes orders
  • Payment processors — to securely process payments (we do not see or store your full card details)
  • Delivery/courier partners — to fulfil and deliver your orders
  • Email service providers — to send newsletters and marketing emails, if you've subscribed

We do not sell your personal data, and we do not share it with third parties for their own independent marketing purposes.

Some of these providers may process or store data outside Kenya. Where this happens, we take reasonable steps to ensure your data remains protected to a standard consistent with the Act.

7. Cookies

The Site uses cookies (small files stored on your device) to:

  • Keep your cart and login session active
  • Understand how visitors use the Site, so we can improve it
  • Support any advertising or analytics tools we use

You can control or disable cookies through your browser settings. Disabling cookies may affect how the Site functions (e.g. your cart may not save between visits).

8. Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Order and transaction records are typically retained for the period required by Kenyan tax and consumer protection law. If you unsubscribe or request deletion, we will remove or anonymize your data unless we're required to keep it for a legal reason.

9. Your Rights

Under the Data Protection Act, 2019, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or outdated data
  • Object to your data being used for direct marketing, at any time and free of charge
  • Request deletion of your data, where we're not legally required to keep it
  • Withdraw consent at any time, without affecting processing already carried out
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled

To exercise any of these rights, contact us at thetextileloft@gmail.com. We will respond within 30 days.

10. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Data Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access, including relying on Shopify's platform-level security and secure, PCI-compliant payment processing. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top will reflect the most recent revision. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

The Textile Loft
Village Market, 1st Floor, New Wing, Nairobi, Kenya
Email: thetextileloft@gmail.com
Phone: +254 717 048 713