Privacy Policy

1. Overview and Data Controller

Mawimbi Gifts Shop, operated under Time Crew Ventures, is committed to safeguarding the privacy of every visitor and customer. This Privacy Policy outlines our practices concerning the collection, usage, storage, sharing, and protection of your personal information when you visit our website, purchase products, or interact with our services.

By accessing our website, placing an order, or communicating with us via phone, email, or WhatsApp, you acknowledge and agree to the practices described in this policy.

2. Applicable Law and Regulatory Compliance

We operate within the Republic of Kenya and strictly comply with the provisions of the Kenya Data Protection Act, 2019, along with regulations and guidance issued by the Office of the Data Protection Commissioner (ODPC). Where relevant for international customers, we uphold universally recognized data protection principles including transparency, purpose limitation, data minimization, and accuracy.

3. Information We Collect

We collect information necessary to fulfill orders, provide customer care, customize products, and improve your shopping experience. This includes:

• Contact Information: Your full name, phone number, email address, physical delivery address, and Kenyan county or city.
• Order and Customization Details: Items purchased, quantities, gift instructions, and custom engraving text provided for watches or accessories.
• Payment and Transaction Information: Lipa na M-Pesa transaction reference codes, payment timestamps, and amounts paid. Please note: We do not collect, process, or store your private M-Pesa PIN, credit card CVV codes, or personal banking credentials.
• Communication Records: Queries, inquiries, and messages submitted through our contact form, direct phone calls, or our WhatsApp customer assistance channel.
• Technical and Usage Data: Internet Protocol (IP) address, browser type, device information, operating system, pages viewed, time spent on pages, and referral sources.

4. How We Use Your Information

Your personal data is used solely for legitimate business purposes, including:

• Processing and fulfilling your orders, packaging gift boxes, and performing requested engraving.
• Coordinating same-day rider dispatches within Nairobi and countrywide courier shipments across Kenya.
• Sending order status updates, delivery alerts, and customer service follow-ups.
• Verifying payments and preventing fraudulent transactions.
• Analyzing website traffic and usage patterns to optimize performance and navigation.
• Complying with statutory accounting, tax, and legal obligations under Kenyan law.

5. Legal Grounds for Processing

In accordance with Section 30 of the Kenya Data Protection Act, 2019, our lawful bases for collecting and processing your personal data include:

• Performance of a Contract: Processing necessary to fulfill your purchase order and deliver purchased goods.
• Consent: Explicit permission provided when you opt into marketing updates or contact us directly.
• Legal Obligation: Maintaining transaction histories for tax reporting and regulatory compliance.
• Legitimate Interests: Protecting our systems against fraud, auditing business performance, and improving service quality.

6. Sharing of Personal Data

We do not sell, rent, trade, or lease your personal information to any third parties for their independent marketing purposes. We only share necessary data with trusted service providers strictly to execute our services:

• Couriers and Delivery Riders: Your recipient name, phone number, and address are shared with delivery partners (such as Nairobi dispatch riders or countrywide bus and parcel couriers) solely for parcel delivery.
• Payment Facilitators: Safaricom M-Pesa to verify payment status and reconcile transaction references.
• Cloud Hosting and Infrastructure: Secure database and hosting providers that maintain our digital infrastructure with strict confidentiality agreements.
• Law Enforcement or Legal Authorities: Only when strictly required by a court order, statute, or authorized government regulator under Kenyan law.

7. Cookies, Pixels, and Analytics

Our website uses cookies and tracking technologies to enhance user experience, remember cart selections, and measure marketing campaigns. These include:

• Essential Cookies: Required for the basic operation of the website, including session management and shopping cart functionality.
• Marketing and Analytics Pixels: We utilize the Meta (Facebook) Pixel and TikTok Pixel to understand user engagement and measure the effectiveness of our advertisements. These pixels collect pseudonymized technical event data such as page views and purchase completions.

You can control or disable cookies through your browser settings. Opting out of cookies may affect certain interactive features of our store.

8. Data Retention and Security

We implement industry-standard physical, electronic, and procedural safeguards to secure your personal data against unauthorized access, loss, alteration, or misuse. All website transmissions are encrypted using Transport Layer Security (TLS/SSL).

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, resolve disputes, satisfy warranty obligations, and comply with Kenya Revenue Authority (KRA) accounting records retention regulations.

9. Your Statutory Rights

Under the Kenya Data Protection Act, 2019, you hold the following rights regarding your personal information:

• Right to be Informed: To know what personal data is collected and how it is processed.
• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request immediate correction of inaccurate, outdated, or incomplete data.
• Right to Erasure: To request the deletion of your personal data, subject to legal and statutory record-keeping constraints.
• Right to Object: To object to the processing of your data for direct marketing purposes.
• Right to Lodge a Complaint: To lodge a formal complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the information provided in Section 14 below.

10. Customer Responsibilities and Custom Engraving

When requesting personalized watch or accessory engraving, you are solely responsible for ensuring the accuracy, spelling, and legality of the text submitted. Mawimbi Gifts Shop is not liable for errors, typos, or omissions in custom text provided by the customer.

11. Third-Party Links

Our website may contain links to third-party services, including Google Maps, Safaricom M-Pesa portals, WhatsApp, and social media platforms. We do not control and are not responsible for the privacy practices, content, or terms of third-party websites. We encourage you to review their respective privacy notices.

12. Age Limitation

Our services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal data from minors without parental or legal guardian consent. If you believe a minor has provided us with personal data, please reach out to us immediately for removal.

13. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our operational practices or legal requirements. Any modifications will be posted on this page with an updated revision date. Your continued use of our services following an update constitutes acceptance of the revised policy.

14. Contact Information and Privacy Inquiries

If you have any questions, requests, or concerns regarding this Privacy Policy or how your personal information is handled, please contact our Data Protection representative: