Privacy Policy

01Who we are

Digivanatech (“we”, “us”) sells electronics and home appliances online at digivanatech.com, through our installable web app, and in our shop at Moi Avenue, near Ambassador Hotel, Ground floor Shop #1, Nairobi, Kenya. We are the data controller for the personal data described in this policy.

We process personal data in line with the Kenya Data Protection Act, 2019 and its regulations.

02Information we collect

Information you give us

• Account details: name, email address, phone number and, optionally, a profile photo.
• Delivery details: delivery address, building name and a contact phone number.
• Order details: products bought, amounts paid, delivery or pickup choice and, if you request a VAT invoice, your KRA PIN.
• Messages you send us through live chat, email, phone or WhatsApp.
• Product reviews and your wishlist.

Information collected automatically

• Device and usage data such as browser type, pages viewed and approximate location derived from your IP address, collected through Google Firebase Analytics.
• A push-notification token if you allow notifications.
• Information stored on your device to keep you signed in and remember your cart. See our Cookie Policy.

Information from others

• If you sign in with Google, we receive your name, email address and profile photo from Google.
• Payment providers (M-Pesa, Paystack, your bank) tell us whether a payment succeeded and give us a transaction reference. We never see or store your card number or M-Pesa PIN.

03How we use your information

• To create and manage your account and keep it secure.
• To process, deliver and support your orders, including returns and warranty claims.
• To send order updates by email, SMS or push notification.
• To answer your questions and resolve complaints.
• To issue tax invoices and meet our legal and accounting obligations.
• To understand how the site is used and improve it.
• To send offers and news, only if you have opted in. You can opt out at any time using the unsubscribe link or by contacting us.
• To detect and prevent fraud and misuse.

04Legal basis

We process your data because we need it to fulfil our contract with you (orders and your account), to comply with the law (tax records), for our legitimate interests (security, fraud prevention and improving our service), or because you consented (marketing messages and push notifications). You can withdraw consent at any time.

05Who we share it with

We do not sell your personal data. We share it only with:

• Delivery partners and couriers, who receive your name, phone number and delivery address.
• Payment providers: Safaricom (M-Pesa), Paystack and banks.
• Google Firebase, which provides sign-in, analytics and push notifications.
• Our hosting and email providers.
• The Kenya Revenue Authority and other authorities when the law requires it.

Some of these providers store data outside Kenya. Where they do, we rely on the safeguards allowed by the Data Protection Act, such as contractual protections.

06How long we keep it

• Account data: as long as your account is open. When you delete your account we erase it straight away.
• Order and payment records: 7 years, because Kenyan tax law requires us to keep them. After account deletion these records no longer carry your name or contact details.
• Chat and support messages: up to 2 years.
• Analytics data: up to 14 months.

07Your rights

Under the Data Protection Act you have the right to:

• Be told how your data is used, which is what this policy is for.
• Access the personal data we hold about you.
• Have inaccurate data corrected. Most details can be edited on your Profile page.
• Have your data deleted. You can do this yourself on the Delete Your Account page.
• Object to processing, including all direct marketing.
• Request data portability.

To use any of these rights, email support@digivanatech.com. We will respond within 7 days. If you are unhappy with our response, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

08Security

Data is sent over HTTPS. Passwords are handled by Google Firebase and never stored by us, and access to customer data is limited to staff who need it. No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the Data Protection Commissioner as the law requires.

09Children

Our store is not intended for children under 18, and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.

10Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. If we make significant changes, we will notify you by email or on the site.

11Contact us