Effective Date: 7th July 2024

1. About Us

BRANDSHOP Limited (“BRANDSHOP”, “we”, “our”, or “us”) is a limited company registered in the Republic of Kenya. We respect your privacy and are committed to protecting your personal data.

Contact Information:

2. Purpose of This Privacy Notice

This Privacy Notice explains how we collect, use, and protect your personal data. It outlines your rights under the Data Protection legislation.

3. What is Personal Data?

Personal Data refers to any information that identifies you, including but not limited to your name, contact details, identification numbers, and online identifiers.

4. How We Collect Your Personal Data

We collect personal data through:

  • Your interactions with our websites and retail outlets.
  • Communication via phone, email, and social media.
  • Transactions for products or services.

Types of Data Collected:

  • Personal details (name, address, email, phone number).
  • Transaction details (purchases, payment methods).
  • Account information (username, password, subscription details).
  • Communication details (call logs, messages).

5. How We Use Your Personal Data

We process your data based on:

  • Contractual obligations: To fulfill our agreements with you.
  • Legal obligations: To comply with applicable laws.
  • Legitimate interests: For our operational purposes.
  • Consent: To send you marketing communications.

6. Your Rights Under the Data Protection Legislation

You have the following rights:

  • Right to be informed about data processing.
  • Right to access your personal data.
  • Right to correct inaccurate data.
  • Right to request deletion of your data.
  • Right to restrict processing.
  • Right to object to data processing.
  • Right to withdraw consent.
  • Right to data portability.

7. Sensitive Personal Data

We do not collect sensitive personal data unless explicitly required by law or with your consent. Sensitive data includes information about race, health, or sexual orientation.

8. CCTV Data Collection

We use CCTV for security purposes in our outlets.

  • Retention Period: CCTV records are retained for no more than 45 days unless an incident is reported.

9. Sharing Your Personal Data

  • Internal Sharing: We share data across departments as necessary.
  • External Sharing: We share your data with service providers and as required by law. We ensure adequate safeguards are in place for data protection.

10. Data Security

We implement organizational and technical measures to protect your personal data, including secure servers, access controls, and data protection policies.

11. Data Retention

We retain personal data only as long as necessary for the purposes it was collected or as required by law.

12. Contact Us

For questions or concerns regarding your personal data, please contact:

13. Amendments to This Privacy Notice

We may update this Privacy Notice and will notify you of significant changes by posting the new notice on our website.

14. Updates to Your Personal Data

Please inform us of any changes to your personal data by emailing us at [email protected].

Thank you for trusting BRANDSHOP with your personal data. We are committed to protecting your privacy and ensuring a secure experience.