Privacy policy

Rokens Collections is the data controller for personal data collected through rokenscollection.com. We process it in line with the Data Protection Act, 2019.

What we collect

• Your name, email, phone number and delivery addresses
• Order, payment and delivery records, including M-Pesa confirmation codes
• Photos, videos, links and vehicle details (VIN or chassis number) you send us for Personal Shopper requests and exchanges
• Messages you send us
• Basic technical data such as IP address, used to keep the site secure

Why we use it

• To take, deliver and support your orders (performance of a contract)
• To verify payments and prevent fraud (legitimate interest and legal obligation)
• To keep tax and accounting records as the law requires (legal obligation)
• To send offers, only if you opt in (consent, which you can withdraw at any time)

Who we share it with

Couriers and riders (name, phone, address) to deliver; suppliers only what they need to fulfil a sourcing request, never your contact details unless needed for delivery; service providers who host our website, database, files, email and SMS on our behalf under contract. We do not sell your data.

International transfers

Some of our service providers store data outside Kenya, for example in the European Union. We use providers with appropriate safeguards as the Act requires.

How long we keep it

Order and payment records for 7 years for tax purposes. Exchange evidence for 12 months after the exchange closes. Marketing preferences until you change them.

Your rights

You can ask to access, correct or delete your personal data, object to its use, or withdraw consent. Write to us at the address below. You may also complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Security

Passwords are stored as one-way hashes, connections are encrypted, and staff access is limited by role and logged.

Contact

Email sema@rokenscollection.com.