Effective Date: 01-01-2026
1. Introduction
VICTORIA FURNITURES LIMTED ("Company") is committed to protecting the privacy and security of your personal information.
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, create an account, place an order, visit our showroom, communicate with us, or otherwise interact with our business.
This Privacy Policy is prepared in accordance with the Data Protection Act, No. 24 of 2019, the Data Protection (General) Regulations, 2021, and other applicable laws of Kenya.
2. Personal Information We Collect
We may collect the following categories of personal data:
- name;
- telephone number;
- email address;
- billing and delivery addresses;
- account login credentials;
- purchase history;
- payment confirmation details (excluding full payment card information);
- customer service correspondence;
- IP address;
- browser type;
- device information;
- cookies and website analytics;
3. How We Collect Personal Data
We collect personal information when you:
- browse our website;
- create an online account;
- place an order;
- subscribe to newsletters;
- contact customer service;
- participate in promotions or surveys;
- communicate with us through email, telephone, WhatsApp, or social media.
4. Purpose of Processing
We process personal data to:
- process and fulfil orders;
- arrange delivery or showroom collection;
- manage customer accounts;
- communicate regarding purchases;
- process payments;
- provide customer support;
- improve our products and services;
- detect and prevent fraud;
- maintain the security of our website and premises;
- comply with legal and regulatory obligations;
- send promotional communications where permitted by law or where consent has been obtained.
5. Legal Basis for Processing
We process personal data where:
- processing is necessary for performing a contract;
- processing is required by law;
- processing is based on your consent;
- processing is necessary for our legitimate business interests that do not override your rights and freedoms.
6. Cookies
Our website uses cookies and similar technologies to:
- remember your preferences;
- maintain shopping cart functionality;
- improve website performance;
- analyze website traffic;
- enhance website security.
7. Marketing Communications
Where required by law, we will obtain your consent before sending electronic marketing communications.
You may unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us directly.
8. Disclosure of Personal Information
We may disclose your personal information to:
- delivery and logistics providers;
- payment processors;
- professional advisers;
- regulatory authorities and law enforcement agencies where disclosure is required by law.
We do not sell your personal information.
9. International Transfers
Where personal data is transferred outside Kenya, we will implement appropriate safeguards as required by the Data Protection Act of Kenya and GDPR.
10. Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- access controls;
- secure authentication procedures;
- encryption where appropriate;
- secure payment processing;
- firewalls;
- anti-malware software;
- regular system monitoring;
- restricted employee access.
Unauthorized access to our systems or attempts to compromise website security may constitute offences under the Computer Misuse and Cybercrimes Act, No. 5 of 2018, and may be reported to law enforcement agencies.
11. Retention of Personal Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law, after which it is securely deleted or anonymized.
12. Your Rights
Subject to applicable law, you have the right to:
- be informed about the processing of your personal data;
- request access to your personal data;
- request correction of inaccurate or incomplete information;
- request deletion where legally permissible;
- object to certain processing activities;
- withdraw consent where processing is based on consent;
- request restriction of processing in appropriate circumstances;
- requests relating to your personal data may be submitted using the contact details below.
13. Children's Privacy
Our website is intended for adults. We do not knowingly collect personal information from children without appropriate legal authority.
14. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
15. Data Breaches
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will respond in accordance with the Data Protection Act, including notifying the Office of the Data Protection Commissioner and affected individuals where required.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.