01 / Overview
About this notice
This notice explains how Casava Vogue handles personal information in connection with our online store, customer accounts, orders and related customer services. It covers the website and the shopping features connected to your Casava Vogue account, including the mobile app where those features are available.
Casava Vogue determines how customer information is used to operate these services. Our customer-care team is the contact for questions about that information. This notice is separate from product descriptions, delivery information and returns guidance; it does not change the terms of an order.
You can browse public product pages without creating an account. Browsing still generates technical and usage information. Signing in, placing an order, uploading an image or contacting support involves additional information, as described below.
02 / What we handle
Information we collect
The information involved depends on what you do. Not every visitor provides every category below.
- Account and profile
- Name, username, email address, phone number, profile picture, sign-in and verification records, and profile details you provide, such as gender or date of birth where requested.
- Orders and account services
- Products, colours, sizes, quantities, prices, order numbers, payment and fulfilment status, wallet records, coupons, saved items, cart contents and order-related messages.
- Delivery and contact
- Recipient details, telephone number, county, address, selected map location or coordinates, and delivery instructions such as a building, landmark or access directions.
- Sizing and preferences
- Size-profile name, height, weight, body measurements, preferred fit and any gender or sizing preferences you choose to save.
- Searches and shopping activity
- Search terms, filters, product views, clicks, saved products, cart actions and recent activity. Image searches can also involve an uploaded image, its technical fingerprint, visual features and search results.
- Support and enquiries
- Messages, contact details, order references, attachments, conversation history, feedback and dispute or account-deletion requests. Guest chat can associate messages with a visitor session rather than a registered account.
- Technical and app information
- IP address, session identifiers, device and browser type, operating system, page and referral information, campaign links, timestamps and approximate IP-derived location. App features can also record app version, device identifiers, download activity and notification tokens.
Optional information can be left out where a feature allows it. Some information, such as contact and delivery details for an order, is necessary to provide the service you request. Please avoid putting unrelated sensitive information into search fields, delivery notes or messages.
03 / Sources
Where information comes from
- From you: forms, profile updates, purchases, messages, uploaded files, preferences and permission choices.
- From your use of the service: shopping interactions, browser requests, sessions, referrals and app events.
- From connected services: sign-in information returned by Google when you choose Google sign-in, payment confirmations from a payment provider, and address or location information from a map service.
- From order handling: fulfilment, delivery and support updates connected to your order.
Approximate location derived from an IP address is different from a delivery point you select on a map. IP location can be inaccurate and does not by itself tell us your exact address.
04 / Everyday use
How information is used
- Create and manage accounts; sign you in; verify contact details; and support account recovery.
- Keep a cart, wishlist, saved addresses and size profile available when you return.
- Calculate order totals, apply eligible offers, request payment, record confirmations and coordinate fulfilment or delivery.
- Provide order tracking, customer support, service messages and dispute handling.
- Find products from text or images and arrange recommendations using shopping interests and recent activity.
- Send customer communications and personalised product emails, and record whether a campaign delivery succeeded or failed.
- Understand website and app usage, referrals and campaign performance; investigate errors, misuse and account-security issues.
- Handle privacy requests and records needed for disputes, accounting or other applicable obligations.
Some records are linked to a registered account; others are associated with a session, device or transaction. Signing out does not delete an existing account, order history or previously recorded activity.
05 / Processing grounds
Reasons for processing
The relevant legal basis depends on the purpose and information involved. Account and order administration can be necessary to provide a service or carry out a purchase agreement. Certain records may be needed to meet legal obligations. Operating, securing and improving a store may involve legitimate interests, subject to your rights and the applicable legal requirements.
Where consent is the required basis, it must relate to the particular use, and you can withdraw it. This notice is an explanation, not a blanket consent request. Reading it, browsing a page or opening an account should not be treated as consent to every optional use of personal information.
You may ask us which basis applies to a particular use of your information. Withdrawal does not undo processing that was lawful before withdrawal, and some information may still be needed for an existing order or another valid purpose.
06 / On your device
Cookies & browser storage
The store uses cookies and browser storage for different functions:
- Sessions and security: remembering a signed-in session and supporting protections for form submissions.
- Shopping continuity: retaining cart information and associating an account cart with its owner. The website sets these cart cookies with a lifetime of up to 30 days; later activity can renew them.
- Preferences and interface state: remembering display language, currency, dismissed offers and similar settings. Local storage can remain until it is cleared; session storage normally lasts for that browser-tab session.
- Activity and measurement: recognising sessions and connecting page visits, searches, referrals and other events used in store analytics.
Use your browser settings to inspect, block or delete cookies and site storage. Blocking storage can affect sign-in, carts and preferences. Clearing your browser does not delete information already held by Casava Vogue or remove an account cart saved on the server. A privacy request is a separate step.
This page does not provide a cookie-consent dashboard. Browser controls do not necessarily stop server-side request logs or delete previous analytics records.
07 / Discovery & messages
Recommendations & marketing
Product views, searches, saves, cart activity and previous interactions can help select products you may like. Recommendations may take account of product categories, colours, gender-related shopping interests and recency. These are shopping signals, not a statement about your identity, and recommendations can be incorrect.
The store supports personalised product emails based on account activity, including sign-in history and recently viewed products. If there is no new activity, earlier interests may still inform suggestions. Campaign records can include the recipient account, products used, message headline, send date and delivery status.
To ask us to stop marketing emails or review the activity used for recommendations, email [email protected] from the address concerned. Include “Stop marketing emails” in the subject. Links labelled unsubscribe in some messages lead to customer care; they are a request route, not necessarily an instant automated preference change.
Order confirmations, payment information, verification codes and support replies serve a different purpose from promotional messages. App notification permissions can be managed in your device settings. If you join WhatsApp updates, contact us through that channel to ask to stop them.
Campaign links may identify the source of a visit, such as Instagram or an email. Delivery-success records are not proof that you read a message or completed a purchase.
08 / Your order
Payments & delivery
M-Pesa payments involve the payment phone number, amount, payment request and transaction references, and the result returned by the provider. Order records can include payment status, deposits and balances. Safaricom operates the M-Pesa service under its own terms and privacy information.
Enter your M-Pesa PIN only in the payment provider's prompt. Do not send a PIN, password or one-time verification code to customer care or put it in a delivery note.
Delivery requires recipient and location information. A selected map point can be stored with your address to support availability checks and delivery coordination. Maps and address suggestions involve Google Maps when that feature is used. Delivery partners and people handling an order may need its reference, recipient name, contact number, address and relevant instructions.
If you arrange delivery for another person, make sure they know you are sharing their details for that purpose. An order number can help retrieve order progress, so avoid posting it together with personal details in public.
09 / Optional tools
Images, sizing & support
Image search and profile pictures
When you submit an image for visual search, the system processes visual features to find matching or similar products. Search records can include the image, a fingerprint or numerical representation, filters, results and processing status. This means an image search is not simply a private action performed only inside your browser.
Use product-focused pictures and avoid faces, identity documents, payment screenshots or private surroundings unless they are genuinely needed for the service. Only upload material you have the right to share. Image-search records have expiry information and a cleanup mechanism, but expiry is not a promise that every copy disappears immediately.
Size profiles
Saved measurements and fit preferences help you keep sizing information with your account. They are optional and can be managed through Size Profile. Measurements can be personal and sensitive; provide only what you want to use for shopping. A size profile is not a medical assessment or a guarantee that an item will fit.
Customer conversations
Guest and registered-user support can retain messages, attachments, timestamps and the order or account context needed to answer an enquiry. Authorised support staff handling the conversation can use that information. Contact through WhatsApp, email or social media also involves the service operating that channel.
Links that open an external AI assistant take you to another provider. Anything you choose to submit there is also subject to that provider's rules. Avoid sharing account secrets or unnecessary personal information with an external assistant.
11 / Location of processing
International processing
Shopping in Kenya does not mean all information stays in Kenya. Online infrastructure, communications, connected platforms and overseas fulfilment can involve processing in other countries. The relevant locations depend on the providers and services involved.
Transfers outside Kenya are subject to applicable data-protection requirements, including appropriate safeguards or another permitted ground. This notice does not itself supply consent for a transfer or establish that a particular provider meets those requirements. Contact us to ask about the recipients, locations and safeguards relevant to your information.
12 / Retention
Keeping & deleting information
Different records serve different purposes, so there is no single deletion period for all store information. Relevant considerations include whether an account or order remains active, whether a payment, delivery or dispute is unresolved, whether records are needed for an applicable obligation, and whether they are still needed for security or support.
- Account details, saved preferences and size profiles support continuing account use.
- Orders, payments, wallet movements and delivery records can remain relevant after a purchase is completed.
- Support conversations and privacy-request records can be needed to follow up an issue and record its outcome.
- Sessions, verification information and image-search records have technical expiry or cleanup mechanisms; their timing differs from account deletion.
- Previously generated copies, logs or backups may not be removed at the same moment as a change in the live service.
You can submit an account-deletion request after signing in, or contact customer care if you cannot access the account. The form records a request for review; submitting it does not immediately erase the account or every connected record. Ask us what can be removed, what must be retained and why.
13 / Account safety
Security & account safety
The website uses account authentication, permission checks and verification steps for relevant account actions. Password-based accounts use the application's password-handling mechanisms; phone and email checks can use temporary codes. These controls reduce risk but do not make a website, device or communication channel completely secure.
Keep your sign-in details private, use a password you do not reuse elsewhere, and sign out on shared devices. Protect the email account and phone number connected to your profile. Contact us if you notice an unexpected account change, payment request or suspicious message.
Do not send documents or credentials through support unless they are necessary and an appropriate method has been agreed. If you have a security concern involving your information, use the contact details below so the team can investigate.
14 / Your control
Your choices & rights
Subject to the applicable conditions in Kenyan data-protection law, you can ask to understand how your information is used, access information held about you, correct inaccurate or misleading information, object to processing, and seek deletion where applicable. Where processing relies on consent, you can withdraw it. Other requests, such as restriction or portability, depend on the circumstances and applicable law.
Contact customer care with the account email or order reference and a clear description of the request. We may need to verify your identity or authority to act for someone else before disclosing or changing information. Avoid sending an identity document unless we explain why it is needed. Some requests can be limited by obligations to retain records or protect another person's information.
Account-management links require sign-in. You do not need an account to email a privacy enquiry. Read the ODPC's explanation of data-subject rights for official guidance.
15 / Extra care
Children & other people's information
Our shopping services are intended for adults aged 18 and over. An adult shopping for a child should avoid including the child's full name, photograph or unrelated identifying details when product sizes or a delivery contact will do.
A parent or guardian who believes a child has supplied personal information can contact us to request a review and appropriate correction or removal. We may need to verify the relationship and identify the relevant account or information. The availability of a form on the website is not proof that age or parental permission has been verified.
Do not create a size profile, upload an image or share a recipient's details for another person without appropriate permission or authority.
16 / Keeping this current
Changes to this notice
This notice may change as store features, service providers and requirements change. The date at the top identifies this version. Review it when using a new feature or sharing a new kind of information. A revised notice is not, by itself, consent to a new use that requires a separate choice.
17 / Get in touch
Contact & complaints
For a privacy question, correction, access request or concern, contact Casava Vogue customer care. Use “Privacy request” in the email subject and describe the information or account concerned.
[email protected]+254 725 476 954Message on WhatsAppYou may also raise a concern with Kenya's Office of the Data Protection Commissioner (ODPC). You do not have to use our customer-care channel before exercising an available right to complain. The ODPC complaints page explains how to lodge a complaint and what information to provide.
Back to top