Privacy Policy

Entity: Roomora Enterprises • Website: roomoraenterprises.co.ke • Jurisdiction: Republic of Kenya (Data Protection Act, 2019)

Roomora Enterprises ("we," "our," or "us") operates the e-commerce website https://roomoraenterprises.co.ke/. We respect your fundamental right to privacy under Article 31 of the Constitution of Kenya and are committed to processing your personal data strictly in accordance with the Kenya Data Protection Act, 2019 (DPA) and international digital standards, including Google Merchant Center and payment network privacy compliance.

Core Commitment: Roomora Enterprises does not sell, rent, monetize, or trade your personal records, contact books, or transaction logs to unauthorized third parties or marketing brokers. We collect only what is strictly necessary to process quotes, fulfill orders, deliver commercial furniture across Kenya, and comply with statutory obligations.

1. Personal Data We Collect

Depending on how you interact with our website, showroom, or quotation desk, we process the following categories of personal data:

Category Specific Information Collected Purpose of Processing
Customer Identity & Contact Full name, official email address, phone number, physical billing address. Order processing, quotation drafting, customer support, WhatsApp communication.
Commercial Delivery & Logistics Delivery address, office floor/building, contact recipient details, county (e.g., Nairobi, Mombasa, Kisumu, Nakuru, Eldoret). Waybill creation, freight coordination, driver dispatch, and furniture installation on-site.
Institutional & Tax Information Company / Organization name, KRA PIN number, official procurement designation. Issuing KRA ETR receipts, tax-compliant commercial invoices, and formal B2B proformas.
Technical & Browsing Identifiers IP address, browser type, device information, visited URLs, session cookies, and UTM source tags. Website security, Core Web Vitals optimization, fraud prevention, and Google Analytics.

2. Lawful Bases for Processing

In accordance with Section 25 and Section 30 of the Kenya Data Protection Act, 2019, we process your personal records on one or more of the following lawful grounds:

  • Performance of a Contract: Processing is required to prepare a price quote, accept your purchase, fulfill shipping logistics (KES 2,000 flat rate delivery across Kenya), and install products at your premises.
  • Legal & Statutory Compliance: Retaining financial records, invoices, and transaction histories to comply with Kenya Revenue Authority (KRA) tax laws and bookkeeping mandates.
  • Legitimate Business Interests: Maintaining web server integrity, preventing malicious transactions, securing WooCommerce checkouts, and analyzing store traffic to improve catalog navigation.
  • Informed Consent: Processing opt-in email communications, newsletter updates, or non-essential cookies where you have explicitly opted in.

3. Payments and Financial Information Security

We prioritize transaction security for Kenyan and regional commercial buyers:

  • M-PESA / Mobile Money: Transactions processed via Safaricom M-PESA STK push, Paybill, or Till numbers are securely handled via licensed Kenyan payment gateways. Roomora Enterprises stores only confirmation transaction codes, phone numbers, and amounts for receipt reconciliation. We cannot access your secret M-PESA PIN.
  • Card & Bank Payments: Direct card processing (Visa / Mastercard) is performed via PCI-DSS certified third-party payment gateways. Roomora Enterprises does not store, collect, or process full 16-digit card numbers or CVV codes on our servers.

4. Disclosure to Third-Party Service Providers

We share minimal necessary data strictly with trusted service partners supporting our business operations:

  • Logistics & Freight Handlers: Sharing your name, delivery address, and contact number with our direct delivery fleet and verified courier partners (such as Wells Fargo, Fargo Courier, G4S, or regional transport carriers) to complete door-to-door deliveries across Kenya.
  • Technology & Hosting Infrastructure: Web servers, cloud backups, and WooCommerce database security monitoring systems operating under strict non-disclosure obligations.
  • Analytics & Conversion Tracking: Google Services (Google Analytics 4, Google Merchant Center, Google Ads) to measure organic reach and commercial conversions. These platforms receive anonymized and pseudo-anonymized web event telemetry.
  • Regulatory & Law Enforcement Authorities: Where compelled by valid court orders, subpoenas, or statutory investigations under Kenyan law.

5. Cookie Policy & Web Tracking

Our website utilizes cookies and similar local storage technologies:

  • Strictly Necessary Cookies: Essential for WooCommerce cart management, keeping session states active during checkout, and maintaining site security. These cannot be disabled without breaking basic store functionality.
  • Performance & Analytics Cookies: Helps us understand page views, load times, bounce rates, and popular furniture categories to continuously enhance browsing performance.
  • Managing Cookies: You can choose to accept, decline, or clear browser cookies via your individual browser settings (Chrome, Safari, Firefox, Edge).

6. Data Retention Period

We retain customer records only for as long as necessary to satisfy the purposes outlined in this policy:

  • Order & Billing Records: Retained for a minimum of seven (7) years in accordance with Kenya tax legislation and commercial audit standards.
  • Customer Accounts: Maintained while active. You may request account deletion at any time subject to unfulfilled order completion.
  • Inquiry & Quote Logs: Non-transacting quotation requests and WhatsApp chat records are periodically reviewed and pruned after 24 months.

7. Your Rights Under the Kenya Data Protection Act

As a data subject under Section 26 of the DPA 2019, you retain enforceable rights regarding your personal records:

  1. Right to be Informed: To understand how and why your personal information is gathered and utilized.
  2. Right of Access: To request a free copy of the personal information Roomora holds concerning your account.
  3. Right to Rectification: To request immediate updates or corrections of inaccurate, outdated, or incomplete data.
  4. Right to Erasure ("Right to be Forgotten"): To request deletion of your personal records where no overriding legal basis or KRA tax mandate requires its retention.
  5. Right to Object & Restrict: To halt direct marketing communications or request restricted processing of disputed records.
  6. Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format.

8. Privacy Inquiries, Data Requests & Complaints

If you have questions regarding this Privacy Policy, wish to exercise any of your statutory data rights, or want to update your procurement contact details, contact our Data Protection desk:

Data Protection Officer / Privacy Lead: Roomora Enterprises Compliance Desk
Physical Address: Nairobi, Kenya
Official Email: privacy@roomoraenterprises.co.ke / info@roomoraenterprises.co.ke
Telephone / WhatsApp Desk: +254 798 013 148

You also maintain the legal right to lodge a formal inquiry or dispute directly with the statutory regulator: The Office of the Data Protection Commissioner (ODPC), Kenya (www.odpc.go.ke).