Skip to main content
ALL-POD
LEGAL

PRIVACY POLICY

Last updated 17 October 2026.

This policy covers what Johnesco Investments Co Ltd collects through all-pod.co.ke, why, and how to exercise your rights under Kenya’s Data Protection Act, 2019.

What we collect

  • Your name, email address, and phone number, given at checkout.
  • Your delivery address, if you choose courier delivery.
  • The artwork files you upload, and any notes or design brief you type.
  • Order and payment records (amount, product, status) — not your card number or M-Pesa PIN, which Paystack handles directly and never passes to us.
  • Basic technical data (IP address, browser) generated automatically by visiting the site.

Why we collect it

To generate quotes, take payment, produce your order, deliver it, tell you its status, and contact you if something about your artwork or order needs attention. We don’t sell your data, and we don’t use it for advertising.

Customer accounts and group collections

If you choose an account, we use your email to send private sign-in links or codes and connect you to your own saved projects and order library. Guest checkout remains available. Keep sign-in links, group invitations and private order links out of assistant chats.

A group collection stores the names, sizes, colours, quantities and notes submitted through its participant link. Its roster is private to the organizer and authorized Johnesco staff; people opening the participant link cannot read it. If an open collection with entries reaches its closing date, we email its organizer to remove unwanted entries or extend the deadline. This requested-service notice is separate from optional project reminders and order-progress preferences. Closing, extending or emptying the collection stops a pending obsolete notice; an email already sent cannot be recalled.

For separate group payments, sales freezes an approved quotation and value-based allocations. The organizer privately shares each named participant's payment link. The first signed-in account approving that link becomes its payer. We retain that account, email, approved specification, payment reference, approved delivery address/phone and reconciliation history. Participants see their own allocation; the organizer sees the roster and payment progress. Keep these links private. Sales invoices are visible only to authorized staff and accounts signed in with the invoice client's verified email.

Creator programme and referral attribution

Following a creator link can save a signed first-party referral cookie for the programme attribution window, normally 30 days. A creator storefront applies its code automatically. You can enter a different valid code before your order attribution is saved. We keep the creator, code, source, time and merchandise value to administer the agreement and any earnings or reversals. Internal eligibility checks compare contact details for self or household purchases and repeated use of different codes. Staff review flagged patterns.

Creators see anonymised order references, dates, items and earnings. They do not receive buyer names, contacts, addresses, artwork or payment access links. Optional link-visit measurement uses your existing usage-measurement preference and respects Do Not Track. Refusing that optional measurement does not stop you applying a creator code.

Creator applications and accounts contain contact and M-Pesa details, public profiles, approval records and agreement acceptance (including the authenticated account, time and IP). These support application review, fulfilment, payment, fraud prevention and agreement administration. Optional email and WhatsApp notices have separate choices which creators can change in their dashboard. Access is restricted to authorised staff and necessary service providers, with retention limited to the purpose and applicable accounting, dispute and legal requirements. Contact us below to exercise your data rights.

Using All-Pod through an AI assistant

If you choose to connect an AI assistant to All-Pod, the connection can send product search terms and selected product specifications to us so we can return catalog information and price previews. If you request a quote using an uploaded or generated file, the assistant can send an authorized download reference so All-Pod can import the file, measure it and prepare a private quote and proof where applicable. AI-imported files are stored encrypted. Private draft, file and proof links grant access to their contents; share them only with people you authorize. You review and approve on our website and complete payment there. The connection does not expose other customers’ drafts or initiate payment.

AI draft links expire after 24 hours. Abandoned AI drafts and their files are eligible for automatic deletion after a further seven days. Files needed for pending payments or active production are retained until the order is completed or cancelled and its retention grace period has passed.

Your AI provider’s own privacy policy applies to your conversations with that provider. You can disconnect All-Pod in your AI application’s settings.

Who else sees it

All-Pod’s website assistant uses DeepSeek after you accept the notice before starting a chat. Your messages, selected product specifications and file metadata (including file names, measurements and artwork warnings) are sent to DeepSeek to provide replies. Original uploaded file contents and private access links are not sent to DeepSeek by this assistant. DeepSeek’s own privacy terms apply to the data it processes. Avoid including sensitive personal information in messages or file names.

The chat and its private draft references are stored encrypted by All-Pod. Your anonymous chat session expires after 24 hours and is eligible for deletion by our scheduled cleanup. Starting a new chat does not delete existing quote or artwork records; their retention rules above still apply.

  • DeepSeek processes the website assistant conversation and selected product and file details when you choose to use it.
  • Paystack processes your payment (M-Pesa or card) and never shares your card/PIN details with us.
  • Cloudflare stores your uploaded artwork files.
  • Resend sends sign-in, order confirmation, status, requested group-deadline and opted-in reminder emails on our behalf.
  • Our own production team, to print and fulfil your order.

We don’t share your data with anyone else, except where required by law.

How long we keep it

Order and payment records are kept for as long as needed for accounting, warranty, and legal purposes. Paper production files are normally eligible for deletion seven days after a delivered or cancelled order was last updated. Files on abandoned or expired paper quotes are normally eligible after seven inactive days. The order and specification records remain. If you explicitly choose to retain artwork for repeat orders, that file is excluded from this routine deletion. Merchandise brand-kit artwork is stored separately for reuse. You can ask us to remove retained artwork once it is no longer needed for an active order or required record. Do not rely on All-Pod as the only backup of your production files.

Customer reviews and photographs

Review links are sent to the saved email address for a delivered purchase. We show a verified-purchase label only after the private emailed link has been used to submit the review. Product photos are optional, are resized with embedded location metadata removed, and are encrypted in storage. A photo is shown publicly only after you permit publication and the owner publishes the review. Keep your private review link to remove its photos and withdraw photo permission. Names and written reviews are moderated before publication; contact us to request their correction or removal. Customer project stories require a separate recorded permission reference.

Cookies

We use functional cookies to remember your cart/quote and, when you start the website assistant, your anonymous chat session between visits. We also store a browser preference so the AI welcome message is shown once rather than on every visit. We don’t use third-party advertising or tracking cookies.

Optional usage measurement

Usage measurement is off by default. If you allow it through Usage preferences in the footer, we count public page visits and clicks to start a quote, grouped by day, public page and referral source. These aggregate counts contain no visitor identifiers, raw referral links, query text, artwork or order details. Your consent choice is stored in this browser and can be changed through the same footer control. Do Not Track disables this measurement. This feature uses no third-party analytics service.

If you allow usage measurement when starting a website assistant conversation, we also link its anonymous conversation reference to saved quote references, a coarse referral source and the public page where you started. This lets us count quotes, checkout starts and verified paid orders, including payments completed after the chat expires. These measurement records contain no conversation text, artwork, full referral URL or contact details. Refusing optional measurement does not stop you using the assistant. Turning measurement off stops further assistant measurement on your next conversation request.

Your rights

Under the Data Protection Act, you can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it (subject to what we’re legally required to keep, e.g. for tax records). Email info@all-pod.co.ke to make a request — we’ll respond within a reasonable time.

Changes to this policy

We may update this policy from time to time; the version in force is whatever’s published here.

Contact

Questions about this policy, or a data request: info@all-pod.co.ke.