2. Information we collect

We may collect the following when you use our services:

1. Your name, email address, and phone number
2. Shipping address and payment details
3. Information you provide when contacting us or using our services
4. Technical data (e.g., browser, device type, IP address) for site security and improvement

3. Why we collect your data?

We use your data to:

• Process and deliver your orders
• Communicate with you (e.g., order updates, customer support)
• Improve our services and customer experience
• Comply with legal, tax, and regulatory obligations
• Send you marketing (only if you’ve agreed—you can opt out anytime) We only process your data where it is lawful, fair, and transparent.

4. Your Rights

Under Kenya’s Data Protection Act, you have the right to:

• Access your personal data
• Correct inaccuracies in your data
• Request deletion of your data (right to be forgotten)
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent for marketing communications

We aim to respond to all requests within 7 to 14 working days.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary based on:

• Order completion requirements and after-sales support
• Legal, tax, and accounting obligations
• Internal reporting and audit needs

After the retention period, we securely delete or anonymize data.

6. Sharing Your Data

We do not sell your personal data.

We share information with trusted partners only when necessary to provide our services:

• Delivery and logistics partners to fulfill orders
• Payment processors to securely process transactions
• Service providers supporting website operations under strict agreements
• Legal disclosures when required by law, regulators, or courts

Where data is transferred outside Kenya, we apply appropriate safeguards, including compliance with African Union standards (Malabo Convention) and legally required data transfer agreements.

7. Keeping Your Data Safe

We implement technical and organizational measures to protect your information, including encryption in transit, access controls, regular security reviews, and staff training.

If a data breach occurs that risks your rights and freedoms, we will notify Kenya’s Office of the Data Protection Commissioner (ODPC) and affected users within 72 hours of becoming aware, unless an exemption applies.

8. Registration and Oversight

Keemsy Consulting Limited is registered with Kenya’s Office of the Data Protection Commissioner (ODPC) and commits to ongoing compliance with the Data Protection Act, 2019 and applicable guidance.

9. Children’s Data

• Our services are not directed to individuals under 18 years of age
• We require parental or guardian consent where processing involves minors
• If we learn we have collected data from a child without valid consent, we will delete it promptly

10. Updates to This Policy

We may update this policy to reflect operational, legal, or regulatory changes. We maintain version control and display the latest version in the website footer with the effective date.

11. Contact Us

If you have questions or requests about this policy:

• Use the Contact page form on our website
• Email our privacy team at info@keemsyconsult.com
• Write to Keemsy Consulting Limited, Nairobi, Kenya