Legal

At Enan Shop, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website or make a purchase from us.

1. Information We Collect

We collect information to provide you with a better shopping experience and to fulfill your orders efficiently.

1.1 Information You Provide to Us
When you create an account or place an order, you provide:
• Personal Identification Information
   o Full name
o Email address
o Phone number (mobile)
• Delivery Information
   o Physical delivery address
o City/town and county
o Postal code (if applicable)
o Delivery instructions or landmarks
• Payment Information
   o M-PESA phone number
o Airtel Money phone number
o Credit/debit card details (processed securely by our payment partners)
o Billing address
• Account Information
   o Username and password (encrypted)
o Order history
o Saved addresses
o Wishlist items
o Product reviews and ratings

1.2 Information Automatically Collected
When you visit our website, we automatically collect:
• Technical Information
   o IP address
o Browser type and version
o Operating system
o Device type (mobile, tablet, desktop)
o Screen resolution
o Time zone settings
• Usage Information
   o Pages you visit on our site
o Products you view
o Time spent on pages
o Links you click
o Search queries
o Date and time of your visit
o Referring website (how you found us)
• Location Data
   o Approximate location based on IP address
o Precise location (only if you grant permission)

1.3 Information from Third Parties
We may receive information about you from:
• Payment Processors
   o M-PESA, Airtel Money, Visa, Mastercard
o Transaction confirmation and status
o Payment verification details
• Delivery Partners
   o Delivery status updates
o Delivery confirmation
o Failed delivery reasons
• Social Media Platforms
   o If you interact with our social media pages
o Public profile information (if you choose to connect)
• Analytics Providers
   o Google Analytics
o Facebook Pixel
o Other marketing and analytics tools

1.4 Cookies, Tracking Technologies and Your Consent
We use cookies and similar tracking technologies to provide, secure, and improve our website, and to display relevant advertisements based on your choices.

a) Types of Cookies We Use
• Essential Cookies: Required for the website to function (e.g., login, shopping cart). These cannot be disabled and are set based on our legitimate interest.
• Performance & Analytics Cookies: Help us understand how visitors use our site (e.g., via Google Analytics). These are disabled by default and require your consent.
• Marketing & Advertising Cookies: Used to track activity across sites to measure ad effectiveness and show personalized ads. These are disabled by default and require your consent.
• Functional Cookies: Remember your preferences (e.g., language) to enhance your experience.

b) How We Manage Your Consent with Google Consent Mode
To respect your privacy, we use Google Consent Mode v2. When you first visit:
• Analytics and advertising tools load in a restricted state.
• No marketing or analytics cookies are set until you grant consent.
• These tools may send limited, non-personal data (“cookieless pings”) to Google for aggregated conversion measurement and fraud prevention, even before consent.
• Your specific consent choices are communicated to Google and determine full data processing.

c) How to Manage Your Preferences
You have full control over non-essential cookies:

• On Your First Visit: A consent banner will appear, allowing you to Accept All, Reject All, or Customise Preferences (granting or denying consent for Analytics and Advertising independently).
• Changing Your Mind: You can update your choices at any time by clicking the “Customise Consent Preferences” button in our website footer.
• Your selections are saved and will be applied on your future visits.
For essential cookies, you may need to adjust your browser settings, though this may affect site functionality.

2. How We Use Your Information

We use your personal information for the following purposes:
2.1 Order Processing and Fulfillment
• Process your orders and payments
• Verify your identity and prevent fraud
• Arrange delivery and shipping
• Send order confirmations and updates
• Provide customer support
• Handle returns, exchanges, and refunds

2.2 Account Management
• Create and manage your account
• Authenticate your login
• Save your preferences and settings
• Maintain your order history
• Process your wishlist and saved items

2.3 Communication
• Send transactional emails (order confirmations, shipping updates)
• Respond to your inquiries and support requests
• Send SMS/WhatsApp notifications about your orders
• Provide important account or policy updates
• Send marketing communications (with your consent)

2.4 Marketing and Promotions
With your consent, we may:
• Send promotional emails about new products, sales, and offers
• Send SMS messages about special promotions
• Display personalized product recommendations
• Show you targeted advertisements on social media
• Invite you to participate in surveys or contests

You can opt out anytime by:
• Clicking “unsubscribe” in our emails
• Updating your preferences in your account settings
• Contacting us at info@enanshop.co.ke

2.5 Website Improvement
• Analyze website traffic and user behavior
• Improve our product offerings
• Enhance website functionality and user experience
• Test new features and designs
• Fix technical issues and bugs

2.6 Legal and Security Purposes
• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraud and security threats
• Resolve disputes and legal claims
• Protect the rights and safety of Enan Shop and our customers

3. How We Share Your Information

We do not sell your personal information to third parties. We only share your data with trusted partners who help us operate our business.
3.1 Service Providers
We share information with third-party service providers who perform services on our behalf:

Payment Processors
• M-PESA (Safaricom)
• Airtel Money
• Visa/Mastercard payment gateways
• Purpose: Process payments securely
• Data shared: Name, phone number, payment details

Delivery Partners
• G4S Courier, Sendy, Fargo Courier, Posta Kenya, and others
• Purpose: Deliver your orders
• Data shared: Name, phone number, delivery address, order details

Technology Providers
• Website hosting services
• Email service providers
• SMS/WhatsApp messaging platforms
• Analytics tools (Google Analytics)
• Purpose: Operate our website and communicate with you
• Data shared: Contact details, usage data

Marketing Partners
• Facebook, Google Ads, other advertising platforms
• Purpose: Show you relevant advertisements
• Data shared: Anonymized or hashed identifiers, browsing behavior

3.2 Business Transfers

If Enan Shop is involved in a merger, acquisition, or sale of assets, your personal information may be transferred to the new owner. We will notify you of any such change and your options.

3.3 Legal Requirements
We may disclose your information if required by law or to:
• Comply with legal process or government requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of Enan Shop, our customers, or the public
• Prevent or investigate fraud, security issues, or technical problems

3.4 With Your Consent
We may share your information with other third parties if you give us explicit consent to do so.

4. Data Security

We take the security of your personal information seriously and implement appropriate measures to protect it.
4.1 Security Measures
Technical Safeguards:
• SSL/TLS encryption for all data transmission
• Secure servers with firewall protection
• Encrypted storage of sensitive data (passwords, payment info)
• Regular security audits and vulnerability testing
• Multi-factor authentication for admin access

Organizational Safeguards:
• Limited access to personal data (need-to-know basis)
• Employee training on data protection
• Confidentiality agreements with staff and partners
• Regular review of security policies

4.2 Payment Security
• We do NOT store your full credit/debit card details
• Payment card information is processed directly by certified payment gateways (PCI-DSS compliant)
• M-PESA and Airtel Money transactions are handled by Safaricom and Airtel respectively
• We only store payment confirmation details, not sensitive payment data

4.3 Your Responsibility
To keep your account secure:
• Use a strong, unique password
• Do not share your password with anyone
• Log out after using shared or public computers
• Keep your contact information up to date
• Report any suspicious activity immediately

4.4 Data Breach Notification
In the unlikely event of a data breach that affects your personal information:
• We will investigate and contain the breach immediately
• We will notify you within 72 hours via email or SMS
• We will provide details about what information was affected
• We will offer guidance on protective measures you can take
• We will report to relevant authorities as required by law

Despite our security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy.

5.1 Retention Periods
Account Information:
• Active accounts: Retained while your account is active
• Inactive accounts: Retained for 3 years after last activity, then anonymized or deleted
Order Information:
• Retained for 7 years for accounting, tax, and legal purposes
• After 7 years: Anonymized or securely deleted

Marketing Data:
• Retained until you withdraw consent or unsubscribe
• Deleted within 30 days of opt-out

Website Analytics:
• Anonymized data retained for 26 months (Google Analytics default)
• IP addresses anonymized immediately

Support Communications:
• Customer service records retained for 3 years
• Then reviewed and deleted or anonymized

5.2 Deletion Requests
You can request deletion of your personal information at any time (see Section 7 – Your Rights). However, we may retain certain information if required by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes).

6. International Data Transfers

Enan Shop primarily operates within Kenya. However, some of our service providers may be located outside Kenya, including:
• Cloud hosting services (servers may be located in Europe, US, or other regions)
• Payment processors with international infrastructure
• Analytics and marketing platforms

When we transfer your data internationally, we ensure:
• Adequate safeguards are in place (standard contractual clauses, Privacy Shield compliance, etc.)
• Your data receives protection equivalent to Kenyan standards
• Compliance with applicable data protection laws

Your data may be processed in countries with different data protection laws than Kenya. By using our website, you consent to such transfers.

7. Your Rights and Choices

Under Kenyan law and international best practices, you have the following rights regarding your personal information:

7.1 Right to Access
You have the right to:
• Know what personal information we hold about you
• Request a copy of your data
• Receive your data in a commonly used, machine-readable format
How to request: Email info@enanshop.co.ke with “Data Access Request” in the subject line. We’ll respond within 30 days.

7.2 Right to Correction
You have the right to:
• Update inaccurate or incomplete information
• Correct errors in your personal data
How to update: Log into your account and update your profile, or contact us at info@enanshop.co.ke.

7.3 Right to Deletion (“Right to be Forgotten”)
You have the right to request deletion of your personal information if:
• The data is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

How to request: Email info@enanshop.co.ke with “Delete My Data” in the subject line.
Note: We may retain certain information if required by law or for legitimate purposes (fraud prevention, dispute resolution, legal compliance).

7.4 Right to Restrict Processing
You have the right to request that we limit how we use your data in certain circumstances:
• While we verify the accuracy of disputed data
• When processing is unlawful but you don’t want deletion
• When we no longer need the data but you need it for legal claims
• While we verify legitimate grounds for processing following your objection

7.5 Right to Object
You have the right to object to:
• Processing based on legitimate interests
• Direct marketing (including profiling)
• Processing for research or statistical purposes
How to object: Update your marketing preferences in your account, click “unsubscribe” in emails, or contact info@enanshop.co.ke.

7.6 Right to Withdraw Consent
If we process your data based on your consent (for
example, for marketing communications or non-essential tracking), you can
withdraw that consent at any time with future effect.

• For
  marketing emails: Use the “unsubscribe” link.
• For
  cookie and tracking preferences: Use the “Customise Consent
  Preferences” button on our site to adjust your settings.

Withdrawing consent does not affect the lawfulness of
processing based on consent before its withdrawal.

7.7 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

7.8 Right to Lodge a Complaint
If you believe we’ve mishandled your personal information, you have the right to:
• Contact us directly to resolve the issue
• Lodge a complaint with the Office of the Data Protection Commissioner of Kenya
Office of the Data Protection Commissioner
Website: www.odpc.go.ke
Email: info@odpc.go.ke

7.9 Exercising Your Rights
To exercise any of these rights:
1. Email us: info@enanshop.co.ke with your request
2. Call us: +254 723 451 401
3. Write to us: Enan Shop, Limuru Road, Nairobi, Kenya
We will respond within 30 days and may request verification of your identity to protect your information.

8. Children’s Privacy

Enan Shop does not knowingly collect personal information from children under 18 years of age.
• Our website and services are intended for adults
• We do not target or market to children
• If we learn we’ve collected a child’s information, we will delete it immediately
If you’re a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@enanshop.co.ke.

9. Third-Party Links

Our website may contain links to third-party websites, including:
• Social media platforms (Facebook, Instagram, Twitter)
• Payment processors
• Product manufacturers or brands
• Partner websites

Important:
• We are not responsible for the privacy practices of these third-party sites
• We encourage you to read their privacy policies
• This Privacy Policy applies only to information collected by Enan Shop

10. Marketing Communications

10.1 Types of Marketing Communications
With your consent, we may send:
• Email newsletters: New arrivals, promotions, style tips
• WhatsApp messages: Personalized recommendations, support
• Retargeting ads: On Facebook, Google, Instagram

10.2 Opting Out
You can opt out anytime:
Email:
• Click “Unsubscribe” at the bottom of any email
• Update preferences in your account settings
• Email info@enanshop.co.ke with “Unsubscribe”

WhatsApp:
• Reply “STOP” or “UNSUBSCRIBE”
• Block our business number

Ads:
• Adjust ad settings on Facebook/Google
• Use browser ad blockers
• Opt out of personalized ads in your account

Important: Opting out of marketing does NOT stop transactional communications (order confirmations, shipping updates, account notifications).

11. Cookies and Tracking Technologies

11.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us:
• Remember your login
• Keep items in your cart
• Understand how you use our site
• Personalize your experience

11.2 Types of Cookies We Use
Essential Cookies (Required)
• Purpose: Website functionality (login, cart, checkout)
• Duration: Session or persistent
• Can’t be disabled without affecting site functionality

Performance Cookies (Optional)
• Purpose: Website analytics and performance monitoring
• Examples: Google Analytics
• Duration: Up to 2 years
• Data: Anonymized usage statistics

Functional Cookies (Optional)
• Purpose: Remember your preferences
• Examples: Language, currency, filters
• Duration: Up to 1 year

Marketing Cookies (Optional)
• Purpose: Personalized advertising and retargeting
• Examples: Facebook Pixel, Google Ads
• Duration: Up to 2 years
• Data: Browsing behavior, interests

11.3 Managing Cookies
Through Our Website:
• Click “Cookie Settings” in the footer
• Accept or reject non-essential cookies
Through Your Browser:
• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Preferences > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy > Cookies

Note: Blocking essential cookies will prevent you from using key website features (shopping cart, checkout).

11.4 Third-Party Cookies
We use third-party services that may set their own cookies:
• Google Analytics (website analytics)
• Facebook Pixel (advertising)
• Payment processors (secure transactions)
These third parties have their own privacy policies. We recommend reviewing them.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:
• Changes in our practices
• New legal requirements
• New features or services
• Customer feedback

12.1 How We Notify You of Changes
Minor Changes:
• Updated “Last Updated” date at the top
• Changes effective immediately upon posting
Major Changes:
• Email notification to registered users
• Prominent notice on our website
• 30-day notice before changes take effect (where legally required)

12.2 Your Continued Use
By continuing to use our website after changes are posted, you accept the updated Privacy Policy. If you don’t agree, please stop using our services and contact us to delete your account.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
📧 Email: info@enanshop.co.ke (Subject: “Privacy Inquiry”)
📞 Phone: +254 723 451 401
💬 WhatsApp: +254 723 451 401
📍 Address: Limuru Road, Nairobi, Kenya

Business Hours
Monday – Friday: 9:00 AM – 5:00 PM
Saturday: 9:00 AM – 12:00 PM
Closed: Sundays & Public Holidays

Response Time
We aim to respond to all privacy-related inquiries within:
• Email: 48 hours
• Phone: Immediate (during business hours)
• Data access/deletion requests: 30 days

14. Legal Basis for Processing (Kenya Data Protection Act)

Under the Kenya Data Protection Act, 2019, we process your personal data based on the following legal grounds:
14.1 Contract Performance
We need your data to fulfill our contract with you (processing orders, delivery, customer support).

14.2 Consent
We process data for marketing communications based on your explicit consent, which you can withdraw anytime.

14.3 Legitimate Interests
We process data for fraud prevention, website security, and business improvement where it’s in our legitimate interest and doesn’t override your rights.

14.4 Legal Obligations
We process data to comply with legal requirements (tax, accounting, consumer protection laws).

15. Your Privacy Matters to Us

At Enan Shop, we’re committed to:
✅ Transparency – Being clear about how we use your data
✅ Security – Protecting your information with industry-standard measures
✅ Control – Giving you choices about your personal data
✅ Respect – Honoring your privacy preferences
✅ Compliance – Following all applicable data protection laws

We believe privacy is a fundamental right, and we’re dedicated to protecting yours.

Thank you for trusting Enan Shop with your personal information. 🔒