Privacy policy

1. Who this policy applies to

This policy applies to customers, prospective customers, website visitors, quotation/RFQ contacts, representatives of businesses and institutions, delivery recipients and other people whose personal information Furstatec receives in connection with its website and business operations.

2. Data controller and privacy contact

For personal information handled through this website and Furstatec’s direct business operations, Furstatec Furniture determines the purposes for which relevant information is used. Privacy requests can be sent to sales@furstatecfurniture.co.ke.

Business location: Liberty Plaza, 1st Floor, Mombasa Road, Opposite The Imaara Mall, Nairobi, Kenya.

3. Personal information Furstatec may collect

The information collected depends on how a person interacts with Furstatec. Furstatec aims to limit collection to information relevant to the transaction, enquiry, service, security requirement or measurement purpose involved.

• Identity and contact data: name, email address, phone number, company or organisation name and contact-person details.
• Order and transaction data: products, quantities, prices, discounts, delivery charges, order notes, invoices, payment status and transaction references.
• Billing and delivery data: billing address, delivery location, recipient details, landmarks, access instructions and delivery notes.
• Account data: username, account email, saved addresses, order history and account preferences. Website passwords are stored using WordPress authentication controls in protected hashed form rather than as readable passwords.
• Enquiry and correspondence data: contact-form messages, emails, WhatsApp enquiries, complaints and customer-support correspondence.
• Quotation, RFQ and tender data: product lists, quantities, procurement requirements, organisation details, uploaded documents/images and information contained in those files.
• Technical and usage data: browser/device information, page interactions, referrer data, IP/network information, cookie identifiers and security/diagnostic information.
• Marketing and attribution data: campaign source, UTM parameters and advertising identifiers such as GCLID, GBRAID, WBRAID or similar identifiers where the relevant technologies are enabled and permitted.

4. How personal information is obtained

Most personal information is provided directly by the individual when placing an order, creating an account, contacting Furstatec, requesting a quotation, providing delivery details or communicating with the business.

Some technical and marketing information may be generated automatically when the website is used, when an advertisement is interacted with, when a visitor arrives from another website or when a browser/device permits cookies or similar measurement technologies.

5. Purposes for which information is used

Furstatec uses personal information for customer service, ecommerce, operational, legal, security and measurement purposes connected with the website and the sale or supply of furniture.

• Creating and managing customer accounts.
• Processing orders, quotations, invoices, payments, collections, deliveries, assembly, exchanges and returns.
• Responding to product questions, support requests, complaints and correspondence.
• Preparing quotations and responding to RFQs, procurement schedules and tender requirements.
• Maintaining transaction, accounting, tax, delivery and business records.
• Protecting the website, customers and Furstatec against fraud, misuse, malicious uploads, unauthorised access and other security threats.
• Diagnosing errors, maintaining performance and improving the store experience.
• Measuring website events, conversions and advertising effectiveness using Google and Meta tools where enabled and permitted.
• Establishing, exercising or defending legal claims and resolving disputes.

6. Lawful and fair processing

Depending on the context, Furstatec may process personal information because it is necessary to take steps requested by the customer or perform a transaction, because a legal obligation applies, because there is a legitimate and proportionate business/security interest, or because consent has been given where consent is the appropriate basis.

Where processing relies on consent, consent may be withdrawn for future processing. Withdrawal does not automatically invalidate processing already carried out lawfully and may not affect information Furstatec must retain or process for another lawful reason.

7. WooCommerce orders and customer accounts

The website uses WordPress and WooCommerce to operate product, cart, checkout, order and account functions. These systems process information needed to remember carts, authenticate users, create orders, maintain account records and support ecommerce administration.

Order and account information is accessible only to authorised personnel who need it for fulfilment, finance, customer service, delivery, returns or administration.

8. Payments and financial information

Current Furstatec payment arrangements include cash/M-PESA on delivery and bank transfer. Where payment is completed outside the website, Furstatec does not need to collect or store payment-card details through the website.

Furstatec may retain payment-status information, transaction references, invoice details and other accounting records needed to match payment to an order, manage refunds and maintain business records.

9. Quotations, RFQs and tender documents

If procurement documents, product schedules, images, spreadsheets, PDFs or other files are submitted through a Furstatec quotation/RFQ feature, those files may contain personal data or confidential business information.

Only information reasonably needed for the quotation should be uploaded. Passwords, banking credentials, unnecessary identity documents or other highly sensitive information should not be submitted unless Furstatec has specifically requested it for a lawful and necessary purpose.

Where file upload is enabled, Furstatec may use file validation, quarantine and malware-scanning controls before staff access a file. Files may be rejected where their type, content, structure or security status does not meet the upload rules.

10. Analytics and advertising measurement

Furstatec may use Google and Meta technologies to understand website activity and measure advertising performance. Measured events may include product views, searches, add-to-cart actions, checkout progress, purchases, quotation submissions, phone clicks and WhatsApp clicks.

Furstatec does not intend to send customer message text, passwords, uploaded tender/RFQ contents or other unnecessary personal content to analytics platforms. Ecommerce measurement should use product/order information and pseudonymous measurement identifiers rather than customer-identifying correspondence.

11. Cookies and similar technologies

The website uses cookies and similar technologies for cart, account, security, analytics and advertising functions. More information is provided in the Cookie Information page.

12. Sharing personal information

Furstatec does not sell customer personal information. Information may be shared with service providers or authorities only where reasonably necessary for a service, business function, legal requirement or protection of legitimate rights.

• Delivery companies, couriers and logistics providers.
• Hosting, website, email, security, backup and technical-service providers.
• Payment and banking providers where needed to process or reconcile payments.
• Google, Meta and measurement/advertising providers where those tools are enabled and permitted.
• Professional advisers, auditors, accountants or legal advisers where reasonably necessary.
• Regulators, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law.

13. International or cross-border processing

Some technology providers operate infrastructure in multiple countries. Where personal information is processed or stored outside Kenya, Furstatec aims to use providers and arrangements that support appropriate safeguards and to handle transfers in accordance with applicable data-protection requirements.

14. Data retention

Personal information is retained for as long as reasonably necessary for the purpose for which it was collected and for related legal, accounting, tax, warranty, fraud-prevention, security and dispute-resolution needs.

Order and business records may be retained for an extended period where continued recordkeeping is necessary. Information that is no longer required should be deleted, anonymised or otherwise handled in accordance with Furstatec’s operational and legal obligations.

15. Information security

Furstatec uses reasonable administrative and technical measures intended to protect information against unauthorised access, accidental loss, misuse and alteration. No website or transmission method can be guaranteed to be completely secure, so customers should also protect their account credentials and avoid sending unnecessary sensitive information.

16. Data-subject rights

Subject to the circumstances and applicable Kenyan data-protection law, individuals may have rights relating to information about processing, access, correction, deletion, restriction, objection and portability. A request may require reasonable identity verification before information is disclosed or changed.

To exercise a privacy right, contact sales@furstatecfurniture.co.ke and describe the request clearly enough for Furstatec to identify the relevant records.

17. Direct marketing and communication preferences

Operational messages about an order, quotation, delivery, account or customer-service request may be sent where necessary to provide the requested service. Promotional communication, where used, should be sent in accordance with applicable requirements and available communication preferences.

18. Children’s information

The Furstatec website is a furniture retail and business-procurement service and is not intentionally directed at children. Customers should not submit a child’s personal information unless it is genuinely necessary and lawful for the relevant transaction.

19. Data incidents and complaints

If you believe Furstatec has handled personal information improperly, contact sales@furstatecfurniture.co.ke first so the concern can be investigated.

Individuals may also have the right to raise a data-protection complaint with Kenya’s Office of the Data Protection Commissioner (ODPC).

20. Changes to this Privacy Policy

Furstatec may update this Privacy Policy when business processes, website features, service providers or legal requirements change. The latest version published on the website applies from its stated update date.