Privacy Policy

1 Who We Are

GRELIZA ENTERPRISES operates the website:

https://grelizaenterprise.co.ke/

We are a technology and electronics business based in Nairobi, Kenya, supplying CCTV cameras, security systems, networking products, vlogging equipment, tools and general electronics.

For purposes of this policy, GRELIZA ENTERPRISES acts as the data controller for personal information it collects and determines how to use.

2 Personal Information We Collect

Depending on how you interact with our website and business, we may collect the following categories of personal information:

• Personal identification: Your name and other details you provide.
• Contact information: Phone number, email address and delivery address.
• Order information: Products purchased, order history, quantities and transaction references.
• Payment information: Payment method, M-Pesa transaction references and payment confirmation details.
• Communication information: Enquiries, customer support messages, feedback and correspondence.
• Technical information: IP address, browser type, device information and website usage data, where collected.
• Cookie information: Website preferences and browsing activity collected through cookies and similar technologies, where enabled.

3 How We Collect Your Information

We may collect your information through:

• When you create an account on our website.
• When you place an order through our online shop.
• When you complete a checkout or payment process.
• When you contact us through phone, email or WhatsApp.
• When you submit an enquiry or contact form.
• When you subscribe to receive promotional communications.
• Through cookies and website technologies, where enabled.

4 How We Use Your Information

We collect and process personal information for legitimate business purposes, including:

• Processing and fulfilling customer orders.
• Arranging deliveries through G4S, matatu couriers or other selected courier services.
• Confirming M-Pesa payments and other transactions.
• Communicating order confirmations, updates and delivery information.
• Responding to customer enquiries and providing support.
• Managing customer accounts and purchase records.
• Handling returns, exchanges and complaints.
• Improving website functionality and customer experience.
• Preventing fraud, unauthorized transactions and misuse of our services.
• Meeting applicable legal, accounting and regulatory obligations.
• Sending promotional offers where the required consent or other lawful authorization has been obtained.

5 Lawful Basis for Processing

We process personal information only where we have an appropriate lawful basis under the Kenya Data Protection Act, 2019.

These may include:

• Contractual necessity: Processing information required to receive, process and deliver your orders.
• Legal obligations: Keeping records and complying with applicable Kenyan laws.
• Legitimate interests: Protecting our business, preventing fraud, responding to enquiries and improving our services, where permitted by law.
• Consent: Where you have voluntarily agreed to specific processing activities, such as promotional communications where consent is required.

Where processing is based on consent, you may withdraw that consent, subject to any lawful reason for continuing to process the information.

6 Sharing Your Personal Information

We do not sell your personal information. However, we may share relevant information with trusted third parties where necessary to provide our services or meet legal obligations.

• Delivery companies: G4S, matatu courier services and other couriers selected by you or arranged for your delivery.
• Payment providers: M-Pesa and payment service providers involved in processing or confirming transactions.
• Website service providers: Website hosting, e-commerce, technical support and maintenance providers.
• Analytics and technology providers: Where enabled, services that help us understand and improve website performance.
• Legal and regulatory authorities: Where disclosure is required or authorized by applicable law.

We aim to share only the information necessary for the relevant purpose and require appropriate safeguards from service providers handling personal information on our behalf.

7 Payment Information

We accept payments through Lipa na M-Pesa and Cash on Delivery, subject to the applicable order arrangements.

M-Pesa transactions may involve processing through the relevant payment service provider. We may retain payment confirmation details and transaction references for order verification, accounting and record-keeping purposes.

We do not intend to collect or store your M-Pesa PIN or other confidential payment authentication credentials.

8 Cookies and Website Technologies

Our website may use cookies and similar technologies to improve your browsing experience.

Cookies may be used to:

• Remember items added to your shopping cart.
• Maintain your website login session.
• Remember customer preferences.
• Understand website usage and performance, where analytics are enabled.
• Improve website functionality and security.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect shopping cart, checkout or other website functions.

Where required, we will seek appropriate consent before using non-essential cookies or similar technologies that process personal information.

9 Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, alteration, disclosure or misuse.

Our safeguards may include:

• Restricted access to customer information.
• Secure website and hosting configurations.
• Appropriate administrative and technical controls.
• Use of trusted service providers.
• Review of security practices and access permissions.

While we take reasonable steps to safeguard information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10 How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or where retention is required or authorized by law.

For example, order and transaction records may be retained to meet accounting, tax, legal, dispute-resolution and business record-keeping requirements.

When personal information is no longer required, we will take appropriate steps to delete, anonymize or otherwise dispose of it securely, subject to applicable legal requirements.

11 International Data Transfers

Some website hosting, cloud storage, analytics or technical service providers may process information outside Kenya.

Where personal information is transferred outside Kenya, we will take the steps required by Kenyan data protection law, including appropriate safeguards or other lawful transfer conditions.

12 Your Data Protection Rights

Under the Kenya Data Protection Act, 2019, you have rights concerning your personal information, subject to applicable legal conditions and exceptions.

To exercise these rights, contact us using the details provided below. We may need to verify your identity before responding.

13 Promotional Communications

We may send information about new products, special offers and promotions where we have obtained the consent or other lawful authorization required under Kenyan law.

You can opt out of promotional communications at any time by following the unsubscribe instructions provided or contacting us directly.

Opting out of marketing messages will not prevent us from sending essential communications relating to your orders, payments or customer service.

14 Children's Privacy

Our website and online shop are intended for general customers and are not specifically directed at children.

Where we process personal information relating to a child, we will comply with applicable Kenyan legal requirements, including obtaining consent from a parent or guardian where required and protecting the child's best interests.

15 Personal Data Breaches

If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the incident.

Where required by the Kenya Data Protection Act, 2019, we will notify the Office of the Data Protection Commissioner and affected individuals within the applicable legal requirements and timelines.

16 Third-Party Websites

Our website may contain links to third-party websites, payment services or other external platforms.

We are not responsible for the privacy practices or content of external websites. We encourage you to review their privacy policies before sharing personal information with them.

17 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website features, services or applicable laws.

Any updates will be published on this page together with the revised update date.

We encourage customers to review this page periodically.

18 Complaints and the ODPC

If you believe that your personal information has been handled in a manner that violates your data protection rights, you may first contact us so that we can address your concern.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

Official website: www.odpc.go.ke

Email: info@odpc.go.ke

Phone: 020 780 1800