Privacy Policy and Data Protection
Operator: Nordic Beverages Limited•Jurisdiction: Republic of Kenya•Last Revised: September 2026
Age Verification
Mandatory age check at registration & ID visual inspection upon delivery under Kenya law.
Zero Data Selling
We never sell personal data. Information is only shared to fulfill orders and comply with law.
DPA 2019 Rights
Right to access, rectify, port, or erase your data with dedicated privacy officer support.
Statutory Response
Guaranteed prompt response within 21 days for all formal data subject rights requests.
Introduction
Nordic Beverages Limited ("Nordic Beverages", "we", "us", or "our") operates the Happy Hour E-commerce Platform (the "Platform"), an online marketplace for the sale and delivery of alcoholic beverages and related products within Kenya.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data belonging to visitors, registered users, and customers of the Platform ("you" or "your"), in accordance with the Data Protection Act, 2019 (the "DPA"), the Data Protection (General) Regulations, 2021, and other applicable laws of Kenya, as well as internationally recognised data protection practices adopted by leading e-commerce platforms.
By creating an account, browsing the Platform, placing an order, or otherwise submitting personal data to us, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your data. If you do not agree with this Privacy Policy, please do not use the Platform.
Who We Are
For the purposes of the DPA, Nordic Beverages is the "data controller" and/or "data processor" responsible for your personal data.
Age Restriction and Eligibility to Purchase
Alcoholic beverages may only be sold to, and purchased by, persons who are 18 years of age or older, in accordance with the Alcoholic Drinks Control Act, 2010 and related county liquor licensing regulations. By registering an account or placing an order, you confirm that you are at least 18 years old.
We require you to confirm that you are 18 years and above and, where applicable, provide a national identity document or passport number to verify eligibility before you can complete a purchase.
Our delivery riders or courier partners may be required to request a valid identification document from the recipient at the point of delivery, and may refuse delivery where age cannot be confirmed.
We do not knowingly offer the Platform to, or collect personal data from, individuals under 18 years of age.
Information We Collect
We collect the following categories of personal data:
Full name, age, phone number, email address.
Products purchased, order value and history, delivery address, delivery instructions, order status, returns, and complaints.
Mobile money details (e.g., M-Pesa phone number and transaction reference), card payment details, billing address, and transaction confirmations. Card and mobile money credentials are processed by our PCI-DSS-compliant payment service providers; we do not store full card numbers or mobile money PINs on our systems.
Delivery address, and, where you grant permission through the Platform, real-time or approximate device location used to facilitate delivery and estimate delivery times.
IP address, device identifiers, browser type and version, operating system, referring/exit pages, clickstream data, and diagnostic log data collected automatically.
Records of customer support enquiries, complaints, product reviews and ratings, and survey responses.
Your choices regarding receipt of promotional emails, SMS, WhatsApp messages, or push notifications.
How We Collect Your Information
How We Use Your Information
We use personal data for the following legitimate purposes:
Legal Basis for Processing
We process personal data on one or more of the following legal bases recognized under the Kenyan DPA 2019:
For marketing communications, optional cookies, and certain data sharing with marketing or advertising partners. You may withdraw your consent at any time, including by clicking the "unsubscribe" link at the bottom of any marketing email.
To process and deliver the orders you place with us, including using your contact details and payment information to fulfil and deliver your order.
Where necessary for us to understand our customers, and operate and improve the Platform, provided this does not unduly affect your privacy and other rights.
Where we are required to process personal data to comply with an obligation under Kenyan law (e.g. tax records, liquor control regulations).
Cookies and Similar Technologies
We and our service providers use cookies, pixels, SDKs, and similar tracking technologies to operate and improve the Platform, including:
Required for core functions such as login, cart persistence, and checkout.
Used to understand how users interact with the Platform and detect errors.
Used to remember your preferences (e.g., location, delivery zone).
Used to deliver relevant promotions, subject to your explicit consent.
You can manage or disable cookies through your browser or device settings. Disabling certain cookies may affect the functionality of the Platform.
Marketing Communications
Where you have opted in, we may send you marketing communications by email, SMS, WhatsApp, or push notification. You may withdraw consent at any time by:
Sharing and Disclosure of your Information
- Payment Service Providers:Mobile money operators and licensed payment gateways/processors to process and confirm payments.
- Delivery & Logistics Partners:Third-party courier companies and independent riders, who receive your name, phone number, and delivery address as necessary to fulfil your order.
- Regulators & Public Authorities:Where required by law, court order, or to establish, exercise, or defend legal claims.
Data Retention
We take every reasonable step to ensure that your personal data is processed for the minimum period necessary for the purposes set out in this Policy. Your personal data may be retained in a form that allows for identification for as long as:
- We maintain an ongoing relationship with you, so that we can provide the Platform to you and ensure you receive communications you have requested; or
- Your personal data is necessary in connection with the purposes set out in this Policy and we have a valid legal basis for retaining it.
We actively review the personal data we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business, or customer need for it to be retained.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including:
We limit access to your personal data to those with a genuine business need to know it, and your personal data may only be processed on our instructions, subject to a duty of confidentiality.
Your Rights under the Data Protection Act, 2019
Please keep us informed if your personal data changes while you hold an account with us. Subject to applicable legal exceptions, you have the following rights:
To exercise any of these rights, please contact us at [email protected].
We may need to verify your identity before processing your request, and we will respond within 21 days of receipt (extendable by a further 21 days where reasonably necessary, with notice to you).
Children's Privacy
The Platform is not directed at, and must not be used by, individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under 18, we will take reasonable steps to delete that data without undue delay.
Call Centre, USSD, and Recorded Communications
Where you contact our customer care team by phone, WhatsApp, USSD, or live chat, we may collect your phone number, the content of your enquiry, and, where applicable, a recording or transcript of the call for quality assurance, staff training, and dispute resolution purposes.
Loyalty, Rewards, and Referral Programmes
If you enroll in any loyalty, rewards, discount-voucher, or referral programme we may offer (for example, earning points on purchases or referring a friend for a discount code), we will collect additional information such as your points balance, redemption history, referral code usage, and the identity of referred users to the extent necessary to administer the programme and prevent abuse. Participation is optional, and you may withdraw at any time; withdrawal may result in forfeiture of unredeemed points or vouchers in accordance with the programme terms.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or applicable law. We will post the updated version on the Platform with an updated revision date.
Governing Law
This Privacy Policy is governed by, and shall be construed in accordance with, the laws of the Republic of Kenya, including the Data Protection Act, 2019, and its subsidiary regulations. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Kenya.
Related Practices and Information
This Privacy Policy should be read together with the following related store documents and policies: