§01 · Privacy

Privacy policy.

Drafted to Kenya Data Protection Act 2019 · Effective 2026

§01

What we collect

We collect the information you give us when you place an order, request a quote, or create an account: your name, company, email, phone number, KRA PIN (if supplied), delivery and billing addresses, and a record of your past orders and quotes. We do not collect payment card details — those are handled by our payment processors directly.

§02

Lawful basis

We process your personal data on two bases: performance of the sales contract you place with us (filling, invoicing and delivering your order) and our legitimate interest in operating the storefront and following up on quotes you initiate. We do not sell your data or use it for behavioural advertising.

§03

Retention

Order records, tax invoices and supporting documents are retained for 7 years to satisfy statutory record-keeping requirements. Marketing contact details, where you've opted in, are kept until you unsubscribe. Account profiles are retained for as long as the account is active; closed accounts are anonymised within 90 days of closure, subject to the 7-year tax retention above.

§04

Your rights

Under the Kenya Data Protection Act 2019 you have the right to: access the personal data we hold about you, request correction of inaccurate data, request erasure (subject to our legal retention obligations), restrict or object to processing, and request a portable copy of your data. To exercise any of these rights, contact our Data Protection Officer via the contact form.

§05

Data Protection Officer

Reach our Data Protection Officer through the contact form or on WhatsApp. We aim to respond to all data subject requests within 14 days. If you're not satisfied with our response you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

§06

International transfers

Our storefront and backend run on cloud infrastructure that hosts data outside Kenya. Transfers are protected by standard contractual clauses with each provider. No personal data is transferred to jurisdictions that lack an adequate data protection framework without your explicit consent.

§07

Cookies

We use a minimal set of cookies: a session cookie to keep you signed in, a cart cookie to remember your basket between visits, and a region cookie so the catalogue defaults to your country. We do not use third-party analytics or advertising cookies.