Privacy Policy

1. Introduction & Scope

Sav Kitchenmart Store (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard personal data through our website https://savkitchenmartstore.com/ in compliance with the Kenya Data Protection Act (2019), GDPR, and CCPA.

2. Data Collection & Use

We collect several categories of data to provide and improve our services:

• Personal Data: Name, email address, phone number, and shipping address (collected via order forms).

• Technical Data: IP address, browser type, and device information (collected via cookies).

• Usage Data: Pages visited and products viewed.

• Sensitive Data: We do not intentionally collect sensitive personal data (e.g., health or religious data) unless required by law.

Purpose of Processing: We use this data to fulfill orders, process payments, provide customer support, and send marketing communications (where consent is provided).

3. Legal Basis for Processing

We process data under the following grounds:

• Contractual Necessity: To deliver your kitchen utensils.

• Consent: For marketing and non-essential cookies.

• Legal Obligation: For tax and accounting purposes.

• Legitimate Interests: To improve our website and prevent fraud.

4. Data Sharing & International Transfers

We share data with third-party vendors (e.g., payment processors like M-Pesa/Stripe, delivery partners). Data may be stored on servers outside of Kenya. We ensure these transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions to maintain data security.

5. Cookies & Tracking

We use essential cookies for site functionality and analytical cookies (e.g., Google Analytics) to understand user behavior. You may opt-out of non-essential cookies through your browser settings.

6. User Rights

Depending on your jurisdiction, you have the following rights:

• Access/Correction: Request a copy of your data or fix inaccuracies.

• Erasure (“Right to be Forgotten”): Request deletion of your data.

• Portability: Request a transfer of your data to another provider.

• Withdrawal of Consent: Revoke marketing permissions at any time.

• California/EU Rights: Specific protections under CCPA/GDPR apply to residents of those regions.

7. Security & Retention

We implement industry-standard encryption and security protocols. Data is retained only as long as necessary for business purposes or as required by law (typically 7 years for financial records).

8. Contact & Updates

Effective Date: January 25, 2026 Contact: [Insert Email/Address] DPO: [Insert Name/Contact if applicable] Governing Law: Laws of the Republic of Kenya.