Privacy Policy
Last updated: 27the April 2026
This Privacy Policy explains how iNGO and iNGO & Co. collect, use, store, share, and protect personal information when you visit www.ingo.ke, place an order, make a payment, book an event, contact us, or interact with our services.
By using our website or services, you agree to the collection and use of personal information as described in this Privacy Policy.
1. Who We Are
iNGO is a Kenyan food, gifting, and dining brand offering curated pantry boxes, wine boxes, culinary boxes, coffee and tea boxes, build-your-own boxes, corporate gifts, and pop-up dining experiences.
For purposes of this Privacy Policy, references to iNGO, we, us, and our include iNGO and iNGO & Co.
2. Contact
For privacy-related requests, contact us through:
Instagram: @ingoandco
Website: www.ingo.ke
3. Personal Information We Collect
We may collect personal information when you:
-
Visit the website
-
Place an order
-
Make a payment
-
Book an event
-
Contact us
-
Sign up for marketing
-
Attend an iNGO event
-
Participate in a promotion
-
Place or manage a corporate gifting order
This information may include:
-
Name
-
Phone number
-
Email address
-
Delivery address
-
Billing details
-
Recipient details
-
Company details
-
Order history
-
Delivery notes
-
Payment confirmation details
-
Transaction IDs
-
Refund records
-
Customer support messages
-
Marketing preferences
-
Dietary notes
-
Allergy information
-
Emergency contact details for events
-
Seating preferences for events
-
Photos, videos, portraits, interviews, or testimonials from events
We do not store card numbers, mobile money PINs, or full payment credentials.
4. Payment Information
Payments on the website are processed by third-party payment providers, including Paystack and DPO.
We may store payment-related records such as:
-
Order confirmations
-
Receipts
-
Invoices
-
Transaction IDs
-
Payment confirmation records
-
Refund records
Full payment details are handled by the relevant payment provider and are subject to that provider’s own privacy and security practices.
5. How We Use Personal Information
We may use personal information to:
-
Process orders
-
Confirm payments
-
Arrange delivery
-
Communicate with customers and recipients
-
Manage corporate gifting orders
-
Prepare event guest lists
-
Manage dietary and allergy requirements
-
Provide customer support
-
Send order updates
-
Send marketing communication where applicable
-
Improve the website and customer experience
-
Track website performance
-
Analyse sales and browsing behaviour
-
Prevent fraud, misuse, and unauthorised transactions
-
Keep business, tax, payment, and transaction records
-
Handle complaints, disputes, refunds, and replacements
-
Comply with applicable legal and regulatory obligations
6. Marketing Communication
We may use your contact details to send marketing communication through channels such as email, SMS, WhatsApp, Instagram, Meta platforms, Google platforms, and other advertising or communication channels.
Marketing may relate to:
-
Product launches
-
New boxes
-
Event announcements
-
Corporate gifting
-
Seasonal campaigns
-
Discount codes
-
Gift cards
-
Promotional offers
-
Brand updates
You may opt out of marketing communication using the unsubscribe or opt-out method provided in the relevant message, where available.
7. Website Analytics and Tracking
We may use analytics, advertising, tracking, heatmap, session recording, and abandoned-cart tools to understand how visitors use the website and to improve our services.
These tools may include:
-
Google Analytics
-
Meta Pixel
-
Google Ads tags
-
TikTok Pixel
-
LinkedIn Insight Tag
-
Heatmap tools
-
Session recording tools
-
Abandoned-cart tracking tools
-
Similar analytics or advertising technologies
These tools may collect information such as device type, browser type, pages visited, links clicked, location approximation, session behaviour, referral source, and interactions with the website.
8. Cookies
Our website may use cookies and similar technologies to support website functionality, checkout, payment, analytics, advertising, and user experience.
We do not currently provide a cookie consent banner or a website-level option to reject non-essential cookies.
You may control or block cookies through your browser settings. Blocking cookies may affect website functionality, checkout, payment, or browsing experience.
9. Delivery Information
We share delivery-related information with third-party logistics partners where needed to fulfil orders.
This may include:
-
Recipient name
-
Phone number
-
Delivery address
-
Delivery notes
-
Order contents
-
Delivery instructions
We do not name specific delivery partners in this Privacy Policy because delivery providers may vary by location, order type, and operational need.
10. Corporate Gifting Data
For corporate gifting orders, clients may provide recipient information such as:
-
Names
-
Phone numbers
-
Delivery addresses
-
Company names
-
Job titles
-
Delivery notes
-
Gift-related instructions
Corporate recipient lists are not uploaded directly through the website.
Corporate recipient data is retained for up to 72 hours after delivery, unless a longer retention period is required for dispute handling, accounting, tax, legal, fraud prevention, or operational recordkeeping.
Corporate clients are responsible for ensuring that they have the right to share recipient information with iNGO.
11. Event Guest Data
For pop-up dinners and other iNGO events, we may collect:
-
Guest names
-
Phone numbers
-
Email addresses
-
Dietary notes
-
Allergy information
-
Emergency contact details
-
Seating preferences
-
Booking details
-
Attendance records
We use this information to manage bookings, seating, dietary needs, safety, communication, and event operations.
12. Event Photography and Videography
Photos and videos may be taken at iNGO events for documentation, marketing, editorial, social media, and promotional use.
This may include general event coverage, identifiable portraits, interviews, and testimonials.
Guests may opt out of identifiable photography or videography by informing the event team on arrival. General background appearance in crowd, table, or atmosphere shots may still occur.
13. Minors
The website is not intended for persons under 18 years old.
Some iNGO products and events may include alcohol or age-restricted products.
We do not knowingly collect personal information from minors for website purchases or event attendance.
14. Sharing Personal Information
We may share personal information with third parties where needed to operate the business and provide our services.
These may include:
-
Payment processors
-
Delivery partners
-
Website service providers
-
Hosting and technical providers
-
Marketing platforms
-
Analytics providers
-
Advertising platforms
-
Event partners
-
Professional advisers
-
Legal or regulatory authorities where required
-
Customer support or operational service providers
We share only the information needed for the relevant purpose.
15. Third-Party Links and Platforms
The website may link to third-party platforms, including Instagram, payment gateways, producer websites, event partners, advertising platforms, and other external services.
We are not responsible for the privacy practices, security, content, or policies of third-party websites or platforms.
16. International Processing
Some service providers, platforms, tools, or systems used by iNGO may store or process information outside Kenya.
Where this happens, the processing is subject to the relevant third-party provider’s systems, safeguards, policies, and applicable law.
17. Data Retention
We retain personal information only for as long as needed for the purpose for which it was collected, unless a longer period is required for legal, accounting, payment, tax, dispute, fraud prevention, or business recordkeeping purposes. Current retention periods are:
-
General customer order records, up to 1 year
-
Marketing subscriber data after opt-out, up to 1 year
-
Event guest lists, up to 1 year
-
Customer support messages, up to 1 year
-
Corporate gifting records, up to 1 year
-
Corporate recipient lists, up to 72 hours after delivery
Transaction, payment, invoice, receipt, and refund records are retained indefinitely
18. Security
We take reasonable measures to protect personal information from unauthorised access, misuse, loss, disclosure, alteration, or destruction.
These measures may include:
-
SSL protection
-
Secure checkout
-
Restricted admin access
-
Password-protected systems
-
Limited access to customer records
-
Restricted handling of corporate recipient lists
-
Internal access limited to the data manager where operationally possible
No online system, website, payment system, or communication channel is completely secure.
19. Your Rights
Subject to applicable law, you may have the right to:
-
Request access to your personal information
-
Request correction of inaccurate information
-
Request deletion of certain information
-
Object to certain processing
-
Withdraw marketing consent where applicable
-
Ask how your personal information is being used
Privacy requests should be sent through our stated contact channels.
We aim to respond to privacy requests within 72 hours.
Some requests may be refused or limited where information must be retained for legal, payment, accounting, tax, fraud prevention, dispute handling, delivery, or legitimate business recordkeeping purposes.
20. Legal and Regulatory Requests
We may disclose personal information where required by law, court order, regulatory request, government authority, payment investigation, fraud prevention process, or dispute resolution process.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The updated version will be posted on the website with the revised date.
Continued use of the website or services after changes are posted means you accept the updated Privacy Policy.
22. Contact Information
Questions or requests about this Privacy Policy should be sent to iNGO through:
Website: www.ingo.ke
Instagram: @ingoandco

