A little something for you, because you deserve it ♡

Privacy policy

We only collect what we need to get your package to you, and we look after it carefully.

Last updated 17th October 2026

Who we are

This website is operated by Her Little Rituals ("we", "us"), a small Kenyan business that sells curated selfcare packages.

We are the data controller for the personal information described in this policy. This policy explains what we collect when you use this website or place an order, why, and what your rights are under the Kenya Data Protection Act, 2019.

What we collect

We never see or store your M-Pesa PIN. Payments are made directly through M-Pesa, not on this website. We do not use advertising or analytics trackers on this website.

Why we use it, and our legal basis

The details marked * at checkout are needed to deliver your order. If you do not provide them, we cannot process it. We do not sell your information and we do not use it for advertising by other companies.

Who we share it with

We only share what is needed to complete your order:

If your information is stored or processed outside Kenya, we take steps to make sure it is protected as the Data Protection Act requires.

How long we keep it

We keep order records for about five years so that we can handle any issues with your order and meet our tax and accounting duties. After that we delete or anonymise them. Newsletter emails are kept until you unsubscribe.

How we protect it

We use reasonable technical and organisational measures to protect your information. If a breach is likely to put your rights at risk, we will notify the Office of the Data Protection Commissioner and affected customers as the law requires.

Your rights

You have the right to be informed about how your data is used, to access it, to correct it, to object to its use, to have it deleted where the law allows, to receive a copy of it, and to withdraw your consent at any time (for example by unsubscribing from emails). To use any of these rights, contact us at shop.herlittlerituals@gmail.com or on 0769 157 154 and we will respond within a reasonable time and in any case within the period the law sets.

If you are not happy with how we handle your information, you can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.

Children

This website is meant for adults. If you are under 18, please ask a parent or guardian to place orders for you. We do not knowingly collect children's data without a parent's or guardian's consent.

Other websites

Our footer links to TikTok and WhatsApp. These are run by other companies and have their own privacy policies.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will tell customers on this website.