Creme Collections

Privacy Policy

At Creme Collections ("we", "us", "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with Kenya's Data Protection Act, 2019. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

1. Information We Collect

We may collect personal information from you in a variety of ways, including when you register on the site, place an order, subscribe to our newsletter, respond to a survey, or fill out a form. The types of personal information collected may include:

  • Personal Identification Information: Name, email address, phone number, physical address, ID number.
  • Financial Information: Credit/debit card details, mobile money information (e.g., M-Pesa phone number). Payment information is processed securely by our third-party payment gateways and not stored on our servers.
  • Transactional Information: Details about products you purchase, order history, shipping details.
  • Technical Data: IP address, browser type and version, location data, time zone setting, operating system, and other technology on the devices you use to access this website.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences for receiving marketing from us and your communication preferences.

2. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

  • Create and manage your account.
  • Process your transactions and deliver the products and services you request.
  • Email you regarding your account or order.
  • Send you a newsletter or other marketing materials, from which you can opt-out at any time.
  • Request feedback and contact you about your use of the Site.
  • Improve our website and offerings to enhance your user experience.
  • Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
  • Comply with legal and regulatory requirements as per Kenyan law.

3. Disclosure of Your Information

We do not sell, trade, or rent your personally identifiable information to others. We may share information we have collected about you in certain situations:

  • By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
  • Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing (e.g., DPO Group, Pesapal), data analysis, email delivery, hosting services, and customer service.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. Data Security & Retention

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy.

5. Your Data Protection Rights under the Kenyan DPA

As a data subject under the Data Protection Act, 2019, you have the following rights:

  • The right to be informed of the use to which your personal data is to be put.
  • The right to access your personal data in our custody.
  • The right to object to the processing of all or part of your personal data.
  • The right to the correction of false or misleading data.
  • The right to the deletion of false or misleading data about you.

If you wish to exercise any of these rights, please contact us using the contact information provided below. We may need to verify your identity before processing your request.

6. Policy for Children

Our services are not directed to individuals under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

7. Contact Us

If you have questions or comments about this Privacy Policy, please contact our Data Protection Officer at:

Email: privacy@cremecollections.shop
Address: Creme Collections, Attn: Data Protection Officer, Taveta Road, Nairobi, Kenya.