Privacy Policy

1. Who controls your information

OfficePoint Kenya is the data controller for personal information collected through this website, checkout, customer accounts, enquiry forms and direct order communication. For privacy questions or requests, use sales@officepointkenya.com.

This policy is intended to support the Data Protection Act, 2019 and applicable Kenyan data-protection regulations.

2. Information we collect

Depending on how you use the website, OfficePoint may collect:

• your name, company, phone number, email and preferred contact method;
• billing, delivery and location information;
• products viewed, cart contents, quotations, orders, returns and support history;
• account login and profile information where an account is created;
• messages, photographs and documents you send about a product or order; and
• technical information such as IP address, device, browser, cookie identifiers, referring page and website activity.

Please do not submit card PINs, passwords or other unnecessary sensitive information through enquiry forms or WhatsApp.

3. Why we use personal information

OfficePoint uses personal information to:

• answer enquiries and prepare quotations;
• confirm stock, process orders and take steps requested before a contract;
• arrange payment, collection, delivery, returns and after-sales support;
• maintain accounts, receipts, tax, accounting and business records;
• secure the website, prevent fraud and investigate misuse;
• improve product information, website performance and customer service; and
• send marketing only where a lawful basis exists and an opt-out is provided.

4. Lawful bases

Depending on the activity, processing may be necessary to perform or prepare a contract, comply with a legal obligation, protect legitimate business and security interests that do not override your rights, or act on your consent.

Where consent is the basis, you may withdraw it. Withdrawal does not affect processing that was lawful before withdrawal or records OfficePoint must keep for another lawful reason.

5. Cookies, analytics and advertising

The website may use essential cookies for cart, checkout, account login, security and preferences. Analytics and advertising tools may also be configured to measure visits, product views, enquiries, purchases and campaign performance.

Where consent is required, non-essential tracking should operate according to the choice presented by the website. You can also control cookies through your browser, although disabling essential cookies may stop cart, checkout or account features working correctly.

6. Who receives information

OfficePoint does not sell or rent personal information. Necessary information may be shared with:

• payment providers and financial institutions;
• delivery, courier, supplier, assembly or installation partners involved in an order;
• website hosting, email, security, analytics, advertising and technical service providers;
• professional advisers, auditors and insurers; and
• courts, regulators, tax or law-enforcement authorities where legally required.

Service providers should receive only the information needed for their role and be subject to appropriate safeguards.

7. International transfers

Some hosting, analytics, email, payment or advertising providers may process information outside Kenya. Where personal data is transferred internationally, OfficePoint will use a lawful transfer basis and reasonable contractual, technical or organisational safeguards.

8. How long information is kept

Information is kept only for as long as reasonably necessary for the purpose collected, including completing orders, supporting customers, resolving disputes, preventing fraud and meeting tax, accounting or legal obligations.

Retention periods differ by record type. Information that is no longer needed should be securely deleted, anonymised or archived where continued retention is legally required.

9. Your data-protection rights

Subject to the Data Protection Act and applicable exceptions, you may request to:

• be informed about processing and access personal data held about you;
• correct inaccurate, outdated, incomplete or misleading information;
• erase information that no longer has a lawful reason to be kept;
• restrict or object to certain processing;
• receive portable data where the right applies;
• withdraw consent and opt out of direct marketing; and
• request human review of a qualifying automated decision.

OfficePoint may verify your identity before acting on a request and will respond within the time required by law. If you are dissatisfied, you may raise the issue with the Office of the Data Protection Commissioner.

10. Security and data incidents

OfficePoint uses reasonable administrative, technical and organisational safeguards such as access controls, encrypted website connections, updates, backups, spam protection and restricted administration. No online system can guarantee absolute security.

If a personal-data breach creates a legal notification duty, OfficePoint will notify the relevant authority and affected people in accordance with applicable law.

11. Children and third-party links

The website is intended for adults purchasing furniture and is not directed at children. Do not submit another person’s information unless you are authorised to do so.

Links, maps, payment pages and embedded services operated by third parties have their own privacy terms. Review those terms before giving them information.

12. Privacy requests and complaints

Contact OfficePoint through sales@officepointkenya.com with the subject “Privacy request”. Describe the information or right involved and provide a safe way to contact you. OfficePoint may ask for information needed to verify identity and protect the account.

If the concern is not resolved, you have the right to lodge a complaint with the Office of the Data Protection Commissioner.