1. Introduction and Commitment to Privacy

RukiHealth ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparency in our data practices. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, make purchases, or interact with our services. Please read this Privacy Policy carefully. If you do not agree with our data practices, please discontinue use of our website and services.

2. Information We Collect

We collect information in the following categories:

• Information You Provide Directly: Name, email address, phone number, billing and shipping information, and payment details when you create an account, place an order, subscribe to our newsletter, or contact customer support.
• Transaction Information: Details about products purchased, order amounts, dates, and payment methods.
• Account Information: Username, password, preferences, and communication history.
• Automatically Collected Information: IP address, browser type, device identifiers, pages visited, time spent, referring URLs, and cookie data.
• Location Data: Approximate location information based on IP to comply with legal obligations and improve services.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Performance of contract (fulfilling your purchase orders)
• Compliance with legal obligations
• Explicit consent (marketing communications)
• Legitimate business interests (fraud prevention, website improvement)
• Protection of vital interests (safety and security)

4. Use of Your Information

We use collected information for:

• Processing and fulfilling RukiHealth orders and transactions
• Customer support and inquiries response
• Order confirmations, shipping notifications, and delivery updates
• Website functionality and user experience improvement
• Sending promotional emails, newsletters, and marketing communications (with consent)
• Fraud prevention and security measures
• Compliance with legal and regulatory requirements
• Statistical analysis and market research

5. Information Sharing and Disclosure

We do not sell or trade your personal information without consent, except in these cases:

• Service Providers: Trusted third parties like payment processors, shipping partners, and email services who assist us under confidentiality obligations.
• Legal Compliance: When required by law, court order, or government authority.
• Business Transfers: In case of merger, acquisition, or bankruptcy.
• Aggregate Data: Sharing anonymized, aggregated data that cannot identify individuals.

6. Data Security and Payment Processing

RukiHealth does not directly handle payment card data. All payments are securely processed by Paystack using SSL/TLS encryption, PCI DSS compliance, and advanced fraud detection. Personal data (name, email, shipping address, order history) is securely stored. We recommend strong passwords and avoiding sharing sensitive information via unsecured channels. For Paystack's security practices, review www.paystack.com.

7. Data Retention

Personal information is retained as long as necessary for business purposes, legal compliance, and dispute resolution. You may request deletion, subject to legal obligations.

8. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to enhance browsing, analyze traffic, and remember preferences. Types: essential, analytical, and marketing cookies. You can control cookies via browser settings. Disabling cookies may affect functionality.

9. Your Rights and Choices

Depending on jurisdiction, you may have rights such as:

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent

Contact us to exercise these rights. We respond within 30 days or as legally required.

10. Third-Party Links and Services

Our site may link to external services. We are not responsible for their privacy practices. Review third-party policies before sharing information.

11. Children's Privacy

Services are not directed to individuals under 18. We do not knowingly collect data from children. If discovered, data will be deleted promptly.

12. International Data Transfers

Your data may be processed in countries with different data laws. By using our services, you consent to such transfers, with safeguards in place.

13. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be posted on our website. Continued use after updates constitutes acceptance.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Republic of Kenya. All disputes are resolved exclusively in Kenyan courts, specifically in Nairobi County.

15. Contact Information

For questions, exercising rights, or privacy concerns, contact us:

• Email: contact@rukihealth.com
• Phone: (+254) 796-620-365
• Business Address: RukiHealth Ltd., Nairobi, Kenya 00100
• Response Time: We respond within 30 days or as required by law

Last Updated: November 2025

This Privacy Policy is effective immediately for new users. Continued use constitutes acceptance.