Privacy policy

This policy explains how [registered company name and address], trading as Zarock Digital, looks after your personal information, under the Data Protection Act, 2019 of Kenya.

What we collect

• When you order: your name, email address, phone number, delivery address and what you bought. For a business purchase, your company name and KRA PIN, if you give them.
• If you make an account: your name, email address, a password (which we keep only in a scrambled form that we cannot read), and an optional saved address.
• When you pay: the payment itself is handled by Pesapal. We are told whether it succeeded and for how much. We never see or store your card number or M-Pesa PIN.

Why we use it

To take and confirm your order, deliver it, take payment, send you your receipt and order updates, deal with warranty and returns, and keep the records the law requires of a business. We do not sell your information, and we do not use it for advertising by other companies.

Who sees it

• Pesapal, to take your payment.
• Our email provider, to send you emails about your account and orders.
• The rider or courier who delivers your order, who needs your name, phone number and delivery address.
• Our staff, as far as they need it to do their work. We may also share information when the law or a court requires it.

Cookies

We use only the cookies the shop needs to work: one that remembers your cart, one that keeps you signed in if you have an account, and one that lets you see an order you have just placed. We do not use advertising or tracking cookies.

How long we keep it

We keep your orders, with the contact details and delivery address you gave for each, because they are our record of a sale. If you delete your account, your sign in, saved address and other personal details are erased, and your past orders stay as records, no longer linked to an account.

Your choices

You can ask to see the information we hold about you, to have it corrected, or to have it erased. You can correct your details, change your password or delete your account yourself from your account page, or contact us and we will help. If you are not happy with how we have handled your information, you can complain to the Office of the Data Protection Commissioner.

Changes to this policy

If we change how we use your information, we will update this page. The date it was last changed is at the bottom.