Privacy Policy
This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally identifiable information’ (PII) is being used online. PII, as used in Kenya privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.
WHAT PERSONAL INFORMATION DO WE COLLECT FROM THE PEOPLE THAT VISIT OUR BLOG, WEBSITE OR APP?
WHEN DO WE COLLECT INFORMATION?
We collect information from you when you register on our site Contact Form or enter information on our site.
HOW DO WE USE YOUR INFORMATION?
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
- To personalize user’s experience and to allow us to deliver the type of content and product offerings in which you are most interested.
- To improve our website in order to better serve you.
- To allow us to better service you in responding to your customer service requests.
- To administer a contest, promotion, survey or other site feature.
HOW DO WE PROTECT VISITOR INFORMATION?
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology. We implement a variety of security measures when a user places an order enters, submits, or accesses their information All transactions are processed through a gateway provider and are not stored or processed on our servers.
DO WE USE ‘COOKIES’?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
We use cookies to:
- Help remember and process the items in the shopping cart.
- Understand and save user’s preferences for future visits.
- Keep track of advertisements.
- Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer) settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies.
If you disable cookies off, some features will be disabled It won’t affect the users experience that make your site experience more efficient and some of our services will not function properly.
However, you can still place orders.
THIRD PARTY DISCLOSURE
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
THIRD PARTY LINKS
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
We have not enabled Google AdSense on our site but we may do so in the future.
KENYA ONLINE PRIVACY PROTECTION ACT
Users can visit our site anonymously Once this privacy policy is created, we will add a link to it on our home page, or as a minimum on the first significant page after entering our website. Our Privacy Policy link includes the word ‘Privacy’, and can be easily be found on the page specified above. Users will be notified of any privacy policy changes: • Via Email
Users are able to change their personal information: • By emailing us
HOW DOES OUR SITE HANDLE DO NOT TRACK SIGNALS?
We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
DOES OUR SITE ALLOW THIRD PARTY BEHAVIORAL TRACKING?
It’s also important to note that we do not allow third party behavioral tracking
FAIR INFORMATION PRACTICES
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur: We will notify the users via email within 7 business days We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.
DATA DELETION POLICY
Purpose
This document sets out our policy for responding to requests for deletion of data under data protection law. This document explains the rights of the data subject in relation to data deletion and our responsibility in responding with such a request.
Individual Rights
An individual has the right to erasure, also known as ‘the right to be forgotten’. The principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
When does the right to erasure apply?
As stipulated in data protection law, individuals have a right to have personal data erased and to prevent processing in specific circumstances:
- Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed;
- When the individual withdraws consent;
- When the individual objects to the processing and there is no other legal ground for the relevant processing activity;
- When the personal data was unlawfully processed;
- Where the personal data has to be erased in order to comply with a legal obligation.
What information is retained?
If consent is provided, personal data (name, address, telephone number and email) may be stored in our system for the purposes of contacting you regarding news, products and promotions.
How can data be deleted?
A user data can be deleted upon request (via the contact form), upon closure of your account, or after three years. If an organization purchases access to our online product, we act as the data processor and the customer acts as data controller. In this case, it is the responsibility of the customer, as data controller, to ensure that data is not held longer than necessary for the purposes for which it is intended.
This data is deleted from the system immediately and cannot be recovered by any users or our employees after this point. Data which has been deleted or otherwise destroyed cannot be recovered at any time. Sufficient warning is given to the account administrator before data are permanently deleted.
Data may still remain in the systems back-up files, which will be deleted periodically.
We undertake to perform the deletion within one month (30 calendar days) and will send you a confirmation once the information has been deleted. Wherever possible, we will aim to complete the request in advance of the deadline.