At Savana Story, we are committed to protecting the privacy and security of our customers and site visitors. This policy describes how we collect, use, and share your personal information in accordance with the Data Protection Act No. 24 of 2019 of the Laws of Kenya.
1. PERSONAL DATA WE COLLECT
When you interact with the Site, we collect two primary types of information:
Device Information: Automatically collected via cookies and log files, including your IP address, browser type, time zone, and how you browse our products.
Order Information: Specifically collected when you make a purchase, including:
Full name and contact details.
Shipping and billing addresses.
Payment identifiers (M-Pesa numbers or partial card details).
Email address for order tracking and correspondence.
2. HOW WE USE YOUR DATA
We process your personal information based on the following legal grounds:
Fulfillment of Contracts: To process your payments, arrange shipping, and provide you with invoices.
Communication: To provide updates on your order status and respond to your inquiries.
Fraud Prevention: To screen orders for potential risk or fraudulent activity.
Marketing: To provide you with information or advertising relating to our premium collections (only when you have provided explicit consent).
3. DATA SHARING & THIRD PARTIES
We do not sell your personal data. We only share information with trusted partners essential to our operations:
Service Providers: We use third-party platforms to power our online store and analytics tools to understand customer behavior.
Logistics Partners: We share your name, phone number, and address with Kenyan courier services to ensure delivery of your items.
Legal Compliance: We may share data to comply with Kenyan laws, respond to subpoenas, or protect our brand's legal rights.
4. YOUR RIGHTS UNDER KENYAN LAW
Under the Data Protection Act (2019), you have specific rights regarding your personal data:
Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccurate or incomplete information.
Right to Objection: You may object to the processing of your data for direct marketing purposes.
Right to Erasure: You may request the deletion of your data where there is no legal requirement for us to keep it.
5. DATA RETENTION & SECURITY
We implement strict organizational and technical measures to protect your data. Key points include:
Order Information is maintained for our records for a period required by Kenyan tax and business regulations.
We utilize encrypted gateways for all payment processing to ensure your financial identifiers are never stored on our local servers.
While we strive for absolute security, no method of transmission over the internet is 100% secure; users provide data at their own risk.
6. MINORS
The Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.
7. CONTACT SUPPORT
For more information about our privacy practices, to exercise your data rights, or to make a complaint, please contact our support team:
