HomeVibe

Privacy Policy

Last updated

At HomeVibe (homevibe.co.ke), we respect your privacy and are committed to protecting the personal data you share with us. This policy explains what we collect, how we use it and how we protect it, in line with Kenya's Data Protection Act, 2019.

1. Information we collect

  • Order details: your name, email address, phone number, delivery address and town, and the products, quantities and total of your order, linked to your account if you're signed in.
  • Account details: if you create an account, your name, email address, phone number and a password, which we store only in scrambled (hashed) form so we can't read it.
  • Saved addresses: if you save delivery addresses, each one's label, address and town.
  • Order tracking: the order reference and phone number you enter, which we check against the order.
  • Technical data: your IP address, which we use to limit repeated attempts at signing in, registering and tracking orders, and which our hosting provider also records in its request logs.
  • Payment: we take M-Pesa, bank transfer and cash on delivery within Nairobi, all arranged after you order, and our website never asks for or stores card details.

2. How we use your information

  • Orders: to process and deliver your order.
  • Contacting you: to reach you about your order by phone, WhatsApp or email.
  • Service and warranty: for installation, service and warranty work on what you bought from us.
  • Preventing fraud and abuse: such as repeated sign-in attempts or the same order being placed twice.
  • Our ads: to measure and improve our Facebook and Instagram ads, through the Meta Pixel described in section 4.

3. Who we share it with

We do not sell your personal data. We share it only with the services that run this website and our orders, and only what each one needs:

  • Hosting and database: our website hosting and database providers, which store the site and your order details.
  • Email: an email service that sends your order confirmations and updates to you, and tells us when you order.
  • Analytics: a website analytics service that counts page visits.
  • Backups: a service that stores encrypted backups of our database.
  • Meta (Facebook): through the Meta Pixel described in section 4.
  • WhatsApp: if you choose to message us or order there, our WhatsApp buttons open a chat with a message about the product filled in, and nothing is sent until you send it.
  • Delivery partners: when we use one, the name, phone number and address they need to deliver your order.

Some of these providers store data on servers outside Kenya; our database, for example, is hosted in the United States.

4. Cookies, analytics and the Meta Pixel

  • Sign-in cookie: only if you sign in, it keeps you signed in for up to 30 days and is removed when you sign out.
  • Your cart: kept in your browser's storage, with the products and quantities in it and nothing else.
  • Checkout key: kept in your browser for the visit, so an order isn't placed twice if you press the button again.
  • Analytics: a website analytics service counts the pages visited.
  • The Meta Pixel: a script from Meta that records which pages you visit and actions like viewing a product, adding to cart, starting checkout and placing an order, with the products, prices and order value. Depending on Meta's settings, it may also collect contact details you type into forms, such as your email or phone number, in hashed form. Meta's script sets its own cookie and receives your IP address and browser details, and Meta uses this under its own privacy policy.

Opting out

  • In your browser: block or clear third-party cookies in its settings, or use a browser or extension that blocks trackers.
  • On Facebook or Instagram: go to Accounts Centre, then Ad preferences, and turn off ads based on activity from Meta's partners.

5. How long we keep your data

  • Orders and accounts: until you ask us to delete them, so we can provide service and warranty on what you bought, though we may need to keep order records our accounts require.
  • Saved addresses: until you delete them in your account, or ask us to.
  • Sign-in: up to 30 days, or until you sign out.
  • IP addresses: those used to limit repeated attempts are kept for about a day.
  • Database backups: 90 days.
  • Your cart: in your browser until you empty it or clear your browser's data.

6. Data security

  • HTTPS: the website is served over HTTPS, so data between your browser and us is encrypted.
  • Passwords: stored hashed, never as you typed them.
  • Sign-in cookie: it can't be read by scripts on the page.
  • Backups: database backups are encrypted before they're stored.
  • Staff access: our staff see orders only through a password-protected admin.

No website is completely secure, but these are the steps we take.

7. Your rights (under Kenya's Data Protection Act)

  • Access: ask for a copy of the personal data we hold about you.
  • Correction: ask us to correct anything that's wrong.
  • Deletion: ask us to delete it.
  • Objection: ask us to stop using it for a purpose you object to.

Email homevibekenya@gmail.com with your request. We may ask you to confirm it's you, for example from the email or phone number on your order.

8. Complaints (ODPC)

If you're unhappy with how we've handled your data, please tell us first at homevibekenya@gmail.com. You can also complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

9. Children's privacy

Our site isn't directed at children under 18 and we don't knowingly collect their data.

10. Changes to this policy

When we change how we use personal data, we'll update this page and the “Last updated” date at the top.

11. Contact us

HomeVibe is responsible for your personal data under Kenya's Data Protection Act, 2019.