Privacy Policy

Flunky Papers is a product of Flunky Ventures, a Kenyan business that produces and sells past paper booklets for Cambridge IGCSE, Cambridge A-Level, Edexcel IGCSE, and SAT examinations.

Questions about this policy? flunkyventures@gmail.com

When you place an order we collect:

• Name and email address — to identify your order and send confirmations or download links.
• Phone number — optional; only used if we need to contact you about a physical delivery.
• Delivery address — for physical (printed) orders shipped within Kenya only.
• Order details — the products, quantities, and amounts in your basket.

We do not store payment card numbers, M-Pesa PINs, or any other sensitive financial credentials. All payments are processed securely by Paystack — see their Privacy Policy for how payment data is handled.

We do not require you to create an account. Orders are accessed via a unique private link sent to your email address.

We use your information solely to:

• Process and fulfil your order (digital delivery or physical shipping).
• Send you your download link or compiled booklet by email.
• Contact you about the status of your order if something requires attention.
• Respond to enquiries you send us directly.

We do not send marketing emails unless you have separately opted in, and we will never sell or share your personal data with third parties for marketing purposes.

Order records (name, email, phone, address, items, payment status) are stored in a Supabase PostgreSQL database hosted on servers in the European Union. Supabase encrypts data at rest and in transit.

Digital PDF files are stored on Cloudflare R2 object storage. Download links are time-limited (expire after 1 hour) and require a valid private token — files are not publicly accessible.

We use only the cookies that are strictly necessary to run the website — for example, your shopping cart contents are saved in your browser's local storage. We do not use advertising cookies or third-party tracking pixels.

We retain order records for as long as necessary to fulfil legal and tax obligations and to allow you to re-access your downloads. If you would like your data deleted, email us and we will remove it from our systems within 30 days, provided there is no outstanding legal obligation to retain it.

You have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data (subject to any retention obligations).

To exercise any of these rights, email flunkyventures@gmail.com.

We may update this policy from time to time. Changes will be posted on this page with a revised date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.