This policy explains how Evansys Technologies handles your personal data when you browse our shop, place an order or contact us. We follow the Data Protection Act, 2019 of Kenya. By placing an order you confirm you have read it.
Who we are
Evansys Technologies (“we”, “us”) runs this online shop from Kenya. We are the data controller for the personal data described in this policy, which means we decide how and why it is used.
- Address: Kimathi House, 6th floor: 604
- Email: info@evansystechnologies.com
- Phone: +254726772499
What personal data we collect
We collect only what we need to run the shop:
- Identity and contact details: first and last name, company name (if you give one), email address and phone number.
- Delivery details: country, street address, town or city, and state or county.
- Order details: the items and quantities you order, your order reference and any notes you add.
- Messages: anything you send us when you contact us.
- Technical data: IP address, browser and device type, pages visited and approximate location derived from your IP address.
We do not store card numbers or mobile-money PINs. If we introduce online payments, they will be handled by a payment provider and we will update this policy.
How we use your data and why
The Data Protection Act requires a lawful basis for every use of personal data. Ours are:
| What we do | Data used | Lawful basis |
|---|---|---|
| Process and deliver your order | Identity, contact, delivery, order details | Performance of a contract |
| Contact you about your order or enquiry | Name, email, phone | Contract, legitimate interests |
| Keep accounting and tax records | Order details | Legal obligation |
| Prevent fraud, spam and abuse, and keep the site secure | Technical data | Legitimate interests |
| Understand and improve how the site is used | Technical data | Consent |
| Send marketing messages (only if you opt in) | Name, email | Consent |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
Who we share it with
We do not sell your personal data. We share it only with:
- Service providers that help us run the shop, such as our email delivery provider (Resend), website hosting and our product and order management system.
- Delivery partners who need your name, phone number and address to get your order to you.
- Payment providers, if and when we offer online payment.
- Professional advisers, such as accountants and lawyers, under a duty of confidentiality.
- Authorities, where the law requires it or to protect our legal rights.
Providers act on our instructions and are only allowed to use your data to provide their service to us.
Transfers outside Kenya
Some of our providers store or process data in other countries, including the United States and the European Union. When that happens we make sure the transfer meets the requirements of the Data Protection Act, 2019, for example through contracts that require an appropriate level of protection, or with your consent where needed.
How long we keep it
We keep personal data only as long as we need it:
- Order and accounting records: [5] years, to meet tax and accounting rules.
- Enquiries and support messages: [12] months after we close them.
- Marketing preferences: until you withdraw your consent.
When the period ends we delete or anonymise the data. Our email provider keeps delivery logs for its own retention period.
Your rights
Under the Data Protection Act, 2019, you have the right to:
- be told how your personal data is being used;
- access the personal data we hold about you;
- object to us processing it;
- ask us to correct data that is wrong or misleading;
- ask us to delete data that is wrong, misleading or no longer needed;
- receive your data in a commonly used format where it applies;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, email info@evansystechnologies.com. We may ask you to confirm your identity first, and we will reply within the time the law requires.
How we protect it
We use measures such as encrypted connections (HTTPS), restricted access to order information and checks on the details submitted through our forms. No system is completely secure, so if a breach is likely to harm you, we will notify you and the ODPC as the law requires.
Cookies and browser storage
We use your browser’s storage to remember what is in your cart and your display choices. This is essential for the shop to work.
[If you use analytics or advertising tools, name them here and explain that they only run with consent.] You can clear or block cookies and site storage in your browser settings, but the cart may stop working.
Children
Our shop is not aimed at anyone under 18, and we do not knowingly collect their personal data. If you think a child has given us their details, contact us and we will delete them.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed, and we will tell you about significant changes on the site or by email.
Contact and complaints
Questions about this policy or your data? Email info@evansystechnologies.com.
If you are not happy with how we handle your data, you have the right to complain to the Office of the Data Protection Commissioner at odpc.go.ke. We would appreciate the chance to fix it first.