Contents
Last updated: June 2026
Your Privacy Matters
This Privacy Policy explains how Blissmal collects, uses, and protects your personal and business information when you use our website, services, and storefront builder. By using our platform, you agree to the practices described here.
If you have questions about this policy, please contact us.
Information We Collect
Account Information
When you create an account on Blissmal, we collect your name, email address, and phone number. This is used to identify you, manage your subscription/orders, and send you important updates.
Store & Transaction Data
We collect details about your store setup, products, and transactions to facilitate the platform's features. Payments are processed through Safaricom M-Pesa. We never see or store your M-Pesa PIN; we only receive transaction receipt verification.
Usage Data
We automatically collect information about how you interact with our platform — pages visited, features used, and time spent. This helps us optimize and improve our services.
Device & Technical Data
We collect your IP address, browser type, and device information for security monitoring, fraud prevention, and ensuring site performance.
How We Use Your Information
Service Operations
Your personal and store information is used to operate and maintain the platform, process billing/transactions, send store notifications, and provide support.
Communication
We use your email and phone number to send platform alerts, billing notices, support responses, and marketing communications (which you can opt out of anytime).
Security & Monitoring
We use collected data to detect suspicious activity, prevent fraudulent transactions, and protect our infrastructure and users.
Analytics
Aggregated, anonymized usage data helps us understand how our customers utilize the platform so we can improve features and user experience.
Data Security
How We Protect Your Data
All data transmitted between your browser and our servers is encrypted using TLS (HTTPS). Passwords and critical credentials are securely hashed. We regularly audit our security practices and infrastructure.
Payment Security
We do not store M-Pesa credentials or PINs. All payment flows go directly through Safaricom's M-Pesa secure APIs, complying with industry-standard protocols.
Restricted Access
Access to account and store database information is restricted to authorized personnel who require it for operations and debugging. All operations are strictly logged.
Sharing Your Information
No Selling of Personal Data
We do not sell, rent, or trade your personal or store information to any third party for marketing purposes.
Third-Party Service Providers
We share necessary data with trusted partners (such as hosting providers, payment gateways, and email dispatchers like Resend) solely to provide platform services. They are bound by strict confidentiality agreements.
Legal Requirements
We may disclose details if required to do so by Kenyan law or in response to valid legal requests by public authorities.
Your Rights
Access & Modification
You can view and modify your profile and store details at any time from your administration dashboard.
Account Deletion
You can request account deletion at any time. We will delete all personal and store databases, keeping only what is required for legal and tax compliance.
Cookies Policy
What We Use Cookies For
We use essential cookies to keep you authenticated and store state information. We also use analytics cookies (anonymized) to understand how you navigate the site.
Control
You can restrict or block cookies through your browser settings, though it may limit core dashboard functionalities.
Questions about your data?
Contact our support team and we'll respond within 2 business days.
Contact Support