Privacy Policy

Tessera Korean Beauty (“Tessera”, “we”, “us”) operates tesserakoreanbeauty.co.ke and our shop at The Pavilion, Westlands, Nairobi. This policy explains how we handle personal data under Kenya's Data Protection Act, 2019, for anyone who browses our site, creates a Care Circle account, or places an order.

At checkout, registration, or when you contact us, we collect:

• Name, phone number and email address
• Delivery address and, where relevant, your preferred delivery area
• Order history, and skin concerns you choose to tell us about
• Payment confirmation details (we do not store your M-Pesa PIN or full card numbers — those are handled directly by our payment providers)
• Basic device/usage data (pages viewed, approximate region) via standard web analytics

We use your data to:

• Process and deliver your order, and contact you about it
• Run your Care Circle account — points balance, tier, referral history
• Respond to questions sent via WhatsApp, Instagram, email or our consultation form
• Meet our own accounting, tax and fraud-prevention obligations
• Improve the site — which pages work, which don't

We do not sell your personal data to third parties.

Only where necessary to run the business:

• Delivery couriers, to get your order to you
• Payment processors (M-Pesa/Safaricom Daraja, and any card gateway we use), to confirm payment
• SMS/email providers, to send order and account notifications
• Kenyan authorities, where the law requires it

We keep account and order records for as long as your account is active, plus the period required by Kenyan tax and consumer-protection law afterward. You can ask us to delete your account at any time — see Section 7.

Passwords are stored hashed, not in plain text. Payment credentials never touch our servers directly — they go straight to our payment providers. We restrict internal access to customer data to staff who need it to do their job.

Under the Data Protection Act, 2019, you can ask us to:

• Show you what personal data we hold about you
• Correct anything inaccurate
• Delete your account and associated data, subject to our legal retention obligations
• Stop using your data for marketing

To exercise any of these, email hello@tesserakoreanbeauty.co.ke or message us on WhatsApp (+254 795 359 350).

We use essential cookies to keep you signed in, remember your cart, and remember your delivery region. We use basic analytics to understand site traffic. We don't run third-party ad-tracking cookies.

If we materially change how we handle your data, we'll update this page and, where appropriate, let existing members know.

Questions about this policy or your data: hello@tesserakoreanbeauty.co.ke or +254 795 359 350 (WhatsApp).