Prayer & Purpose logoPrayer & Purpose

Privacy Policy

Last updated: 17 October 2026

1. Who we are

Prayer & Purpose, run by [PrayerandPurpose40], is the data controller for this website. Contact: hello@yourdomain.com. We handle personal data in line with the Kenya Data Protection Act, 2019.

2. What we collect

Contact form: your name, email address, topic and message. WhatsApp or email: your number or address and what you tell us. Purchases: the payment platform collects your payment and delivery details and shares order information with us. We do not see or store your card or M-Pesa PIN. Technical data: our hosting provider may log IP addresses and browser details for security and delivery. Cookie choice: we store your cookie preference in your browser.

3. How we use it

To reply to your messages and prayer requests, deliver and support your purchases, keep the site secure, and meet legal obligations. If you accept optional cookies, we may also use them to understand how the site is used.

4. Our legal basis

We process your data with your consent (for example when you send the contact form), to perform a contract (your order), and for our legitimate interest in running a secure website.

5. Who we share it with

Only service providers needed to run the site: GitHub or Cloudflare (hosting), Formspree (contact form delivery), payment and delivery platforms, and WhatsApp (Meta) if you message us there. We do not sell your personal data.

6. How long we keep it

Messages are kept only as long as needed to respond and for reasonable record keeping. Order records are kept as required for accounting and tax purposes.

7. Your rights

You can ask to access, correct or delete your data, object to or restrict its use, and withdraw consent at any time. Email us and we will respond within a reasonable time. You may also complain to the Office of the Data Protection Commissioner (Kenya).

8. Children

This site is not directed at children under 13, and we do not knowingly collect their data.

9. Security

The site uses HTTPS and we limit access to the data we hold. No online service is completely secure, so please avoid sharing sensitive details unless necessary.

10. Changes

We may update this policy. The date at the top shows the latest version.