Updated July 14, 2026
What we know about you, why we know it, and what you can ask us to do about it.
From you: your name and contact details, your business and payout details if you sell, what you list, what you order, where it goes, and what you say to us and to sellers.
From your device: your browser, network, session, and security logs, plus what you searched, viewed, and put in your cart.
From others: payment providers, delivery partners, identity and risk checkers, and the sellers and buyers you deal with.
To run the thing you asked for — create your account, show your duka, take the order, move the money, confirm the delivery, pay you out, and help when it goes wrong.
To catch fraud, payment abuse, prohibited items, account takeover, and sellers who do not deliver.
To make the platform better — what to fix, what to build, what to show you, and how to keep it fast and safe.
When you place an order, the seller gets what they need to fulfil it: your name, your contact, where to deliver or where you will collect, and your messages about the order.
When you sell, buyers see your duka, your products, your delivery options, and your replies to them.
We limit what a seller can see to their own duka, where the platform supports that scoping. Once a seller has your details, protecting them is their responsibility as well as ours.
The partners who make the platform work: hosting and infrastructure, payments and installments, delivery and mapping, SMS and email, fraud and identity checks, analytics, support, accounting, audit, legal, and compliance.
Payment and delivery partners handle your information under their own terms when they take a payment or move a parcel.
Regulators, courts, banks, payment networks, or the police — when the law requires it, or when we need to protect someone’s safety, rights, or security.
We use cookies and similar storage to keep you signed in, remember your cart and your preferences, measure how checkout performs, and spot abuse.
Blocking them can break checkout, empty your cart, sign you out, or make our fraud checks refuse an order.
Where the law gives you a say over non-essential marketing, we do not force it on you.
We keep information for as long as we need it for your orders, your payouts, support, accounting, tax, audits, fraud prevention, legal claims, and platform security.
We protect it with administrative, technical, and organisational safeguards. No online service can promise perfect security, and we will not pretend otherwise.
Protect your side too: your password, your device, your invite links, your API keys, and your payout details.
Depending on who you are and what the law says, you can ask to see, correct, delete, export, or restrict your information, or object to how we use it.
Some of it we must keep — records tied to orders, payouts, disputes, fraud, tax, accounting, safety, or enforcement. If we refuse a request, we will tell you why.
Most of your account, duka, contact, and notification details you can change yourself, without asking us.
Odd Republic Limited is the company responsible for the information described in this notice. Where this notice says “we” or “us”, that is who you are dealing with.
We may update this notice as the platform, our partners, or the law changes.
If a change matters to you, we will tell you — through the platform or another channel that reaches you.
To make a privacy request, email hi@sokko.ke or write to P.O. Box 122–00100, Nairobi. Tell us what you want us to do and we will tell you what we can and cannot do, and why.
Not sure how this applies to you?
hi@sokko.ke