This policy explains what personal data ArtScent collects when you use artscent.co.ke, why we collect it and what your rights are. We handle personal data in line with the Data Protection Act, 2019 of Kenya.
1. Who we are
ArtScent is a perfume retailer on Olenguruone Avenue, Kileleshwa, Nairobi. For any privacy question, contact us on +254 799 990822 by phone or WhatsApp.
2. What we collect
- Order details: your name, mobile number, optional email address, delivery address and notes, the products you order and how you plan to pay.
- Account details: if you create an account, your email address, name, mobile number, saved address and a securely hashed version of your password. We never store your password itself.
- Technical data: your IP address is used briefly to protect sign in and checkout from abuse, and our server keeps standard access logs.
We do not collect payment card or Mpesa PIN details on this website.
3. Why we use it
- To process, confirm and deliver your order, and to contact you about it. This is necessary to perform our contract with you.
- To run your account and show your order history, at your request.
- To keep the website secure and prevent fraud, which is in our legitimate interest.
We do not send marketing messages unless you ask us to, and we do not sell your data.
4. Who we share it with
- Sakenora, the point of sale system we use in our shop, receives your name, phone number, email address and order so we can prepare it.
- Delivery riders or couriers receive the name, phone number and address needed to deliver your parcel.
- Our hosting and email providers store and send data on our behalf.
5. Cookies and storage
We use one essential cookie to keep you signed in and to protect forms from forgery. Your bag is saved in your own browser so it is still there when you come back. We do not use advertising or analytics cookies.
6. How long we keep it
We keep order records for as long as Kenyan tax and accounting law requires. Account details are kept until you ask us to close your account.
7. Your rights
You have the right to be informed about how your data is used, to access it, to have inaccurate data corrected, to object to processing and to ask for your data to be deleted, subject to the law. To use any of these rights, contact us. If you are unhappy with our response, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
8. Security
The website is served over an encrypted connection, passwords are stored as one way hashes, and our point of sale key never leaves our server.
9. Changes
If we change this policy, we will update the date at the top of this page.