To perform our functions, we collect personal or sensitive personal data from customers, website users and members of the public (referred to as “you” or “your” in this Privacy Notice).
This Privacy Notice:
- sets out the types of personal data that we collect about you
- explains how and why we collect and use your personal data
- explains how long we keep your personal data for
- explains when, why and with who we will share your personal data
- sets out the legal basis we have for using your personal data
- explains the effect of refusing to provide the personal data collected
- explains the different rights and choices you have when it comes to your personal data
- explains how we may contact you and how you can contact us
Personal Data
Personal data is any information that can identify an individual directly or indirectly. Examples include your name, identification number, email or home address, photograph and bank account details, and any data that would allow you to be identified when combined with other data.
Who does this Privacy notice apply to?
This Privacy Notice applies to the personal data of:
- Customers
- Members of the public
- Website users
To be clear, if you are an employee of Chandaria Brothers Limited you should refer to Company’s Employee Privacy Policy. We may amend this Privacy Notice from time to time. Please visit this page to stay up to date, as any changes will be posted here.
How do we collect your personal data?
When you purchase our products or services or engage in other transactions with us, we process your purchase and transaction data to provide you with our products and services. When you access our services online, our web servers automatically create records of your visit. We also use cookies on our websites, which is described in our Cookie Policy. We use the collected online identifiers as well as your purchase and transaction data for personalizing, marketing, and developing our products and services.
You can subscribe to our marketing newsletter from our website. In case you subscribe to our newsletter, we will process your data to provide you with the latest news concerning our products and services. Additionally, some of our applications and services allow you to subscribe to push notifications which promote Chandaria Brothers Limited and third-party content.
When you make orders on our electronic commerce platforms, we process your data for fraud detection purposes. If we cannot verify the authenticity of your transaction, we are not able to enter into a contract with you to provide you with our products and services. Your personal data is disclosed to fraud detection service provider which confirms us the authenticity of the transaction and that you are not subject to sanctions.
- Customers– We collect data directly from you when you:
- key in your information in data collection fields provided on our website, live chat boxes or social media platforms, emails you have sent to us, testimonials and opinions you may have posted publicly
- contact our customer service teams and our call centre
- make an enquiry or register your interest in any of the products we sell or at an event we, a manufacturer or third party have held
- place an order, purchase or book an appointment for a a product demo, goods or any other products or services
- register on the careers page of our website and when you apply for a role with us
- reach us through phone calls, email, in person or any other means for any reason
We may also collect information indirectly from you through third parties such as our suppliers, stockists, regulatory and supervisory/regulatory bodies.
- 2. Website visitors – we collect data directly from you when you visit our website key in data in our data collection fields on our website. We may also collect data indirectly through cookies and other online identifiers.
Where we collect indirectly from you, we will endeavour to inform you within fourteen (14) days of such collection.
Our Lawful basis for processing your personal data
Chandaria Brothers Limited processes your personal data for on the following lawful basis:
- where you consent to processing for one or more specified purposes. Where we rely on consent, we do so to the extent that it is permissible in law. Where you give us consent, you have the right to withdraw the consent at any time.
- where the processing is necessary: –
- for the performance of a contract to which you are a party or to take certain steps at your request before entering a contract
- for compliance with any legal obligation to which Chandaria Brothers Limited is subject.
- to protect your vital interests or another person/individual
- to enable us to perform a task carried on in public interest or in the exercise of official authority vested in Chandaria Brothers Limited
- for legitimate interests pursued by Chandaria Brothers Limited by a third party to whom the data is disclosed, except if the processing is unwarranted having regard to the harm and prejudice to your rights and freedoms or legitimate interests.
- for purpose of historical, statistical, journalistic, literature and art or scientific research.
Who do we share your personal data with?
Where appropriate, we may share your personal data in various ways and for various reasons with: –
- appropriate personnel within the company
- third-party service providers who perform functions on our behalf including IT systems providers and our marketing consultants
where we share your data, we ensure that there are appropriate data processing or data sharing agreements (or similar protections) in place.
Disclosure of Personal information
We will not usually disclose your personal information other than as already explained above. However, there may be circumstances where we need to share personal information other than as anticipated. These include:
- where we are legally required to disclose the information. This includes sharing the personal information with tax authorities and law enforcement agencies for the purposes of the prevention and detection of crime
- where we need to disclose the personal information for the purpose of resolving a complaint or in connection with any legal proceedings, or for the purpose of obtaining legal advice, or the disclosure is otherwise necessary for the purposes of establishing, exercising or defending legal rights
- disclosure is required to protect our interests, or someone else’s interests (for example, to prevent fraud)
- disclosure is necessary to protect your vital interests (for example if you are unwell at our premises, we may need to seek medical assistance)
- it is to a third party for the purposes of providing administrative or processing services on our behalf. If such disclosure is required, we will take steps to ensure that the third party protects the personal information in the same way that we do and notify you of any changes to this privacy notice.
Subscribing & Unsubscribing to our Direct marketing messages
- If you have made an enquiry into our products or services, we will provide you with a clear choice to consent to receiving marketing materials by giving you an opt-in to receiving such communications. If you have provided your consent, we may collect your contact details (name, postal address and email address) to provide you with such communications.
- If you ever decide you want to change your marketing preferences or no longer wish to receive our marketing communications, you can do so at any time by using the opt-out link provided in your email or SMS. If you do unsubscribe, please note that we will still keep your email and phone number in a separate secure list so that we can make sure that you do not receive our marketing communications again in the future.
How do we safeguard your personal data?
Chandaria Brothers Limited has taken appropriate technical, administrative, and procedural security measures, consistent with local and international information practices and regulations, to protect the personal data from misuse, unauthorised access or disclosure, loss, alteration, or destruction. These measures include:
- Technology safeguards, such as use of anti-virus software and firewalls, passwords, encryption, and monitoring of our systems to ensure compliance with our security policies.
- Organizational safeguards, through training and awareness programs on security and privacy, to ensure employees understand the importance and means by which they must protect personal data, as well as through data protection and security policies and Notice standards that govern how Chandaria Brothers Limited treats personal data.
If you suspect any misuse or loss of or unauthorized access to your personal data, please let us know immediately by sending us an email on info@chandariabros.com
For how long do we keep your personal data?
We will only keep your personal data for as long is necessary to achieve the purposes for which it was required unless the retention is required or authorized by law, reasonably necessary for a lawful purpose, you have consented to longer retention periods or if the personal data is required for statistical, journalistic, literature and art or research purposes. We maintain an up-to-date retention schedule. Where the information is past the retention period, we use secure methods to dispose the data.
What happens when you decline to provide the data requested or you request us to stop processing your personal data?
Our ability to perform our obligations derived from your business relationship with us and our ability to comply with our legal and contractual obligations sometimes depends on Chandaria Brothers Limited accessing and being able to use certain personal data. Therefore, and depending on the circumstances, if you do not provide us with the personal data we request or if you ask that we stop processing your personal data, we may not be able to perform our contractual obligations, we may be in breach of one or more legal obligations applicable to us. In some cases, if we are not allowed to process your personal data, this may result in us being required to terminate our work relationship with you.
What rights do you have over your data?
The Data Protection Act, 2019 accords you with several rights over your data.
- right to information: you have a right to be informed of how the Company will use your personal data.
- right of access: you are entitled to access your personal data that is in our possession or custody.
- right to object: you can object to the processing of all part of your personal data, unless we can demonstrate a compelling legitimate interest for the processing which overrides your interests or for the establishment, exercise or defence of a legal claim.
- right to rectification: you have the right to request us to rectify or correct, without undue delay, personal data in our possession or under our control that is inaccurate, outdated, incomplete or misleading
- right to erasure: you can request us to delete or destroy, without undue delay personal data that we are no longer authorized to retain, or which is irrelevant, excessive, or obtained unlawfully.
- right to data portability: you have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and to transmit the data to another data controller without hindrance. You also have the right, where technically possible, to have personal data transmitted directly from us to another data controller or data processor.
- automated decision-making: you have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning or that significantly affects you. Chandaria Brothers Limited may from time to time make decisions based on the automated processing of your personal data. In such instances, you will be informed, in writing, whenever a decision based on automated processing is taken. In addition, you can request us to reconsider any decisions made based on automated processing or to take a new decision that is not based solely on automated processing.
- right of restriction: You have the right to request us to restrict the processing of personal data where: -you contest the accuracy of the personal data
- the personal data is no longer required for the purpose of the processing
- the processing is unlawful of you have opposed the erasure of the personal data and requested for restriction of its use instead.
- you have objected to the processing of personal data, pending verification as to whether our legitimate interests override your interests over the data.
o right to raise a complaint: You can raise a complaint about our processing with the regulator i.e., the Office of the Data Protection Commissioner in Kenya. You may also be able to seek a remedy through the courts if you believe that your rights have been breached.
How to exercise your rights
- If you wish to exercise any of the rights outlined above, please write an email to info@chandariabros.com
- We will endeavour to answer all questions via email within the timelines stipulated in law.
- If the provision of the data involves the data of third parties, these third parties can be asked in advance whether they have objections to the provisions.
- We may ask for identification, because we need to know for certain whether we are issuing the data to the right person.
- In some cases, we will not be able to comply with your request. If this happens, you will be duly notified.
What are Cookies and how do we use them?
Cookies are small files of letters and numbers that we store on your browser or the hard drive of your device. There are different types of cookies that we use for different purposes; however generally speaking cookies help us to distinguish you from other users of our website, which allows us to provide you a better experience and also allows us to improve our website.
You can block cookies at any time by activating the setting on your browser that allows you to refuse some or all cookies. However, if you do block cookies there may be parts of our website that you will be unable to access or that will not function properly.
We use the following types of cookies:
- Strictly necessary cookies.
These are cookies that are essential for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
- Analytical/performance cookies.
They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies.
These are used to recognise you when you come back to our website so that we can personalise our content for you, greet you by name and remember your preferences (for example, your region).
If you require further information about the cookies we use, then please contact us using the details provided below.
Third Party Links
This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the Privacy Notice of every website you visit.
Your responsibility
- You are responsible for the information you make available to Chandaria Brothers Limited, and you must ensure it is accurate, honest, truthful, and not misleading in any way. You must ensure that the information does not contain material that is obscene, defamatory, or infringing on any rights of any third party.
- Further, if you provide any information concerning any other person, for example if you provide any other person’s details in connection with any purchase, you are responsible for providing any notices and obtaining any consents necessary for Chandaria Brothers Limited to collect and use that information.
To whom should I direct a question or complaint?
If you have any questions or complaints about the processing of personal data, you can contact us on the following email address info@chandariabros.com