Legal · Privacy

Privacy Policy

Your privacy matters to us. Learn how Mega Online Limited collects, uses, and protects your personal information — and the rights you have over your data.

Mega Online Limited Effective: 2026 ~8 min read
Compliant with Kenya's Data Protection Act, 2019 We never sell your personal data You can exercise your rights anytime
On this page
01

Introduction

Welcome to Mega.co.ke. Mega Online Limited ("Mega", "we", "our", or "us") is committed to protecting the privacy and personal information of our customers, website visitors, suppliers, and other individuals who interact with our business.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you visit our website, use the Mega Android app (ke.co.mega.mega_mobile), make a purchase, sell or trade in an item, contact us, or use any of our services.

We respect your right to privacy and are committed to handling your personal data in accordance with the Constitution of Kenya, the Data Protection Act, 2019, and applicable data protection regulations.

By using our website or app, you acknowledge that you have read and understood this Privacy Policy.
02

Information We Collect

We may collect the following categories of personal information:

A

Personal Identification

  • Full name
  • Phone number
  • Email address
  • Physical / delivery address or location
  • Other information voluntarily provided
B

Transaction & Purchase

  • Products purchased or sold
  • Order details & transaction history
  • Payment confirmation details
  • Delivery & collection information
  • Trade-in & product valuation
C

Website Usage

  • IP address
  • Browser type & version
  • Device information
  • Pages visited & time spent
  • Referring source & navigation data

Collected through cookies, analytics tools, and similar website technologies where applicable.

D

Communication

  • Messages & phone calls
  • Emails & WhatsApp conversations
  • Inquiries, feedback & complaints
  • Other communications with Mega
E

Android app

The Mega Android app, package ke.co.mega.mega_mobile, uses the same account as the website. Sign-in is sent over HTTPS to https://mega.co.ke/api/v1. With your permission, the app uses the camera and the system photo picker only so you can add product photos. It does not scan your photo library. It may show notifications for new marketplace chat messages while the app is open. It does not ask for your location or for access to all files on the device.

03

How We Collect Your Information

We collect personal information through various channels, including:

When you create an account on our website or in the app
When you place an order or make a purchase
When you submit a product inquiry
When you contact us via phone, email, WhatsApp, or social media
When you sell, exchange, or trade in an item with us
When you subscribe to promotional communications
Through cookies and website analytics technologies
From service providers involved in processing your transactions

We only collect information that is reasonably necessary for our business operations and the purposes outlined in this policy.

04

How We Use Your Personal Information

Mega Online Limited may use your personal information for the following purposes:

Order Processing & Service

To process purchases, confirm orders, arrange delivery or collection, respond to inquiries, and provide after-sales support.

Buying & Selling of Goods

To facilitate buying and selling of new and pre-owned electronics, furniture, and other products — including trade-ins, item assessments, and transaction records.

Communication

To communicate with you regarding orders, inquiries, complaints, account information, and other business-related matters.

Marketing & Promotions

To inform you about new products, offers, discounts, and services that may interest you — subject to applicable laws and your preferences. You may opt out anytime.

Website Improvement

To analyse traffic, improve functionality, enhance user experience, and develop better products and services.

Security & Fraud Prevention

To detect, prevent, and investigate fraud, unauthorized transactions, suspicious activity, and security breaches.

Legal & Regulatory Compliance

To comply with applicable Kenyan laws, tax obligations, regulatory requirements, and lawful requests from competent authorities.

05

Sharing & Disclosure of Information

Mega Online Limited does not sell your personal information to third parties.

However, we may share your information with trusted third parties where necessary for legitimate business purposes, including:

Payment service providers

To facilitate and verify payments.

Delivery & logistics companies

To deliver purchased goods to customers.

Website hosting & technology providers

To maintain and operate our website and app.

Marketing & analytics providers

To support advertising campaigns and website performance analysis, where applicable.

Professional advisers

Such as accountants, auditors, or legal advisers.

Government & regulatory authorities

Where required by law or lawful order.

Any sharing of personal information will be limited to what is reasonably necessary and subject to appropriate safeguards.

06

Payment Information

Mega.co.ke may facilitate payments through available payment methods, including mobile money, bank transfers, or other payment service providers.

Where payments are processed through third-party providers, your payment information may be handled directly by those providers under their own privacy and security policies.

Mega Online Limited does not intend to collect or store your complete payment card details, PINs, passwords, or mobile money credentials.

Security Warning

Never disclose your M-Pesa PIN, bank PIN, or account passwords to anyone claiming to represent Mega Online Limited. We will never ask for these.

07

Cookies & Website Technologies

Our website may use cookies and similar technologies to improve website functionality and user experience.

Cookies may be used to

  • Remember user preferences
  • Support website functionality
  • Analyse website traffic
  • Improve website performance
  • Support marketing activities, where applicable

Managing cookies

You may manage or disable cookies through your browser settings. However, disabling certain cookies may affect some website features.

Where required by law, we will seek your consent before using non-essential cookies or similar technologies.

08

Data Security

Mega Online Limited takes reasonable technical and organizational measures to protect personal information against:

Unauthorized access
Loss or theft
Accidental disclosure
Unauthorized alteration
Destruction or misuse

We limit access to personal information to authorized personnel and service providers who require it for legitimate business purposes. The website and the Android app communicate with Mega over HTTPS.

Although we take reasonable steps to safeguard your information, no internet-based system or electronic storage method can be guaranteed to be completely secure.
09

Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected.

Information may be retained for:

  • Processing and completing transactions
  • Maintaining customer and business records
  • Responding to disputes and complaints
  • Meeting legal, tax, accounting, and regulatory obligations
  • Preventing fraud and protecting our business interests

When personal information is no longer required, we will take reasonable steps to securely delete, anonymize, or otherwise dispose of it in accordance with applicable laws.

10

Your Data Protection Rights

Under applicable Kenyan data protection laws, you may have the following rights:

Right to be informed

To know what personal information we hold and why we use it, as described in this policy.

Right of access

To ask for a copy of the personal information we hold about you.

Right to correction

To ask us to correct information that is inaccurate or incomplete.

Right to deletion

To ask us to delete your account and personal information. You can start that request at mega.co.ke/delete-account without installing the app. We aim to complete a verified request within 30 days. Order and payment records may be kept where Kenyan tax or accounting rules require it.

Right to object

To object to marketing, or to ask us to restrict how we use your information where the law allows.

Right to withdraw consent

Where we rely on your consent, you may withdraw it at any time. That does not affect processing that already happened lawfully.

To use these rights, contact us using the details below. You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

11

Third-Party Sites

Our website and messages may link to other sites, including payment providers, delivery companies, social networks, and sellers. Those sites are not operated by Mega Online Limited and have their own privacy policies.

If you sign in on the website with Google, Google shares the name and email on that Google account so we can open your Mega account. We do not receive your Google password.

12

Children's Privacy

Mega.co.ke and the Mega Android app are not directed at children. We do not knowingly collect personal information from anyone under 18.

If you believe a child has given us personal information, contact us and we will take reasonable steps to delete it.

13

International Transfers

Mega Online Limited is based in Kenya. Some providers that host the site, deliver email, or process payments may store or access information outside Kenya.

Where that happens, we take reasonable steps so the information remains protected in line with the Data Protection Act, 2019.

14

Changes

We may update this Privacy Policy from time to time. The current version is published on this page, with the effective year shown at the top.

If a change is significant, we will take reasonable steps to draw it to your attention. Continuing to use Mega after an update means you have read the revised policy.

15

Contact Us

Questions about this policy, or a request to access, correct, or delete your information, can be sent to Mega Online Limited: