Privacy Policy — Jackastro Ebook Store

Last updated: 28 October 2026

Who we are

Jackastro Ebook Store operates at https://byronjustinex.blog and is operated by Byron Mosoti, trading as Jackastro Ebook Store. Business address: 30 Moi Avenue, Nairobi, Kenya. Postal address: P.O. Box 49210–00100, Nairobi, Kenya.

We are responsible for the personal information described here. Privacy and account-deletion requests: byronjackmanx@gmail.com. Additional support: Telegram.

Information we collect

Depending on how you use the website, we collect your email address and authentication information; Google account identifier and basic profile information such as your name, email, and profile picture when you choose Google sign-in; information you send to support; and technical information such as IP addresses, browser information, access times, and security logs. Our authentication provider processes email/password credentials. We do not receive your Google password.

When purchases are available, we may process purchased titles, transaction references, payment status, and delivery records needed to fulfil orders. Payment methods and any payment provider used will be identified at checkout. Do not send passwords or payment credentials through support messages.

How and why we use information

We use information to authenticate users, manage accounts, deliver purchased content, respond to support requests, protect the service, prevent fraud, and meet legal obligations. Our legal grounds include performing our agreement with you, legal obligations, consent where required, and legitimate interests such as maintaining security where these do not override your rights. Any promotional messages will include an unsubscribe option and require consent where applicable.

Google account information

We use information received through Google sign-in to authenticate you and manage your store account. This sign-in feature does not request access to Gmail messages, Google Drive files, or Google contacts. We do not sell Google account information or use it for targeted advertising. Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including Limited Use requirements where applicable.

Service providers and sharing

We use Supabase for authentication and account services, IONOS for website hosting, and Cloudflare for domain and related network services. Google processes information when you choose Google sign-in. Providers receive information needed to perform their services. Any payment provider introduced will be disclosed before you submit payment information.

We may disclose information when legally required, to protect legal rights or security, or in a business transfer subject to applicable safeguards. External services, including Google and Telegram, operate under their own privacy policies.

Cookies and browser storage

We use browser storage and, where applicable, cookies to maintain authentication sessions and support essential functions. These may keep you signed in between visits. You can clear or restrict storage in your browser, although sign-in features may stop working. We will explain optional analytics or advertising technologies and obtain consent where required before using them.

International processing

Providers may process information outside Kenya. Our Supabase project is currently hosted in London, United Kingdom. Other providers may process information in additional countries. International transfers must use safeguards required by Kenyan data protection law, such as appropriate contractual protections or another lawful transfer mechanism.

Retention and security

We retain information only as long as reasonably necessary to maintain accounts, fulfil orders, resolve disputes, and satisfy legal obligations. When no longer needed, information is deleted or anonymised, subject to lawful retention requirements and backup cycles. We use reasonable technical and organisational safeguards; no online service can guarantee absolute security.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability; object to certain processing; or withdraw consent where processing relies on consent. Contact byronjackmanx@gmail.com to exercise these rights or request account deletion. We may verify your identity. Some records may need to be retained for legal reasons.

You can remove our access through your Google account settings; this does not automatically delete your store account. You may complain to Kenya’s Office of the Data Protection Commissioner.

Children

The store is intended for adults. We do not knowingly create accounts for children under 18. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

Changes

We may update this policy as the service changes. We will update the date and provide additional notice where a material change or applicable law requires it.