Confidentialité

This notice explains what we do with information about you. We have tried to write it in plain language rather than in the language of a form.

Who we are

Jamari Homes Ltd is the data controller for the information described here. You can reach us at Third Ngong Avenue, Upper Hill, Nairobi, on +254 118 757 994, or by email at info@jamarihomesltd.com.

[TO CONFIRM: company registration number, and the Office of the Data Protection Commissioner registration number once obtained.]

What we collect, and why

We collect four kinds of information, and only these.

When you make an enquiry

Your name, email address, telephone number, the nature of your enquiry and anything you choose to write in the message. We use it to answer you and to keep a record of the conversation so that a colleague can pick it up if the person you spoke to is away. We also store the network address the enquiry came from, for a short period, so that we can block automated abuse of the form.

When you open an account

Your name, email address and telephone number, and any delivery addresses you choose to save. Your password is never stored — only a one-way cryptographic hash of it, which cannot be turned back into your password by us or by anyone who obtained a copy.

When you place an order

What you bought, what you paid, the delivery address, and a record of the payment. We do not receive, see or store your card number. Card payments are handled entirely by our payment provider on their own systems; we are told only whether the payment succeeded and a reference for it. For M‑Pesa, we receive the transaction reference and the paying telephone number from Safaricom.

When you browse the site

We count page views so we know which pieces people are looking at. This is done entirely on our own server and sets no cookies: instead of an identifier that follows you, we hold a short one-way code derived from your network address and browser, mixed with a secret that changes every day. It lets us count a day's visits without being able to recognise you tomorrow, and it cannot be turned back into your address. We also record how quickly pages loaded for you, so we can find the slow ones. If your browser sends a "do not track" or Global Privacy Control signal, we record nothing at all.

Cookies

We use one cookie, and only when you sign in or put something in a basket: it holds your session so the site remembers who you are between pages. It is not used for advertising, it is not shared, and it expires when you close your browser. Because we set no analytics or advertising cookies, this site does not show a cookie banner.

Our legal basis

• To perform a contract — processing your order, taking payment, delivering.
• Our legitimate interests — answering enquiries, preventing fraud and abuse of the forms, and understanding in aggregate how the site is used. We have considered your interests in each case, which is why the site measurement is designed not to identify you.
• Legal obligation — keeping records of sales for tax and accounting.
• Consent — if you ask us to send you news of new collections. You can withdraw it at any time and every message will carry a link to do so.

Who we share it with

We do not sell your information and we do not share it for anyone else's marketing. We share what is necessary with: our payment providers, in order to take payment; the couriers and installation partners who deliver to you; our email provider, in order to send you the messages you are expecting; and our hosting provider, who stores the site and its database. Where the law requires it, we will disclose information to a regulator, a court, or the Office of the Data Protection Commissioner.

[TO CONFIRM: the named payment provider, courier partners and hosting provider should be listed here before launch.]

Where your information is held

The site and its database are hosted [TO CONFIRM: country of the hosting account]. Some of our providers may process information outside Kenya. Where they do, we rely on the safeguards permitted under section 49 of the Data Protection Act 2019 and, for information about visitors in the European Union or the United Kingdom, on the standard contractual clauses.

How long we keep it

• Enquiries — kept while the conversation is live and for a reasonable period afterwards so we can pick up a returning client's history, then deleted.
• Accounts — for as long as your account is open. Close it and we delete it, apart from what we must keep for tax.
• Orders and payment records — [TO CONFIRM: seven years is the usual Kenyan retention period for accounting records; confirm with your accountant].
• Site measurement — no more than 400 days, and it cannot identify you after the day it was recorded.

Your rights

You have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted, to object to our using it, to ask us to restrict how we use it, and to receive it in a portable form. You can exercise any of these by writing to info@jamarihomesltd.com. We will respond within the statutory period. You can correct most of your own details yourself at any time under My details.

If you are not satisfied with how we have handled your information you can complain to the Office of the Data Protection Commissioner in Nairobi. If you are in the European Union or the United Kingdom you may also complain to your local supervisory authority.

Security

The site is served over an encrypted connection. Passwords are stored only as one-way hashes. Access to the back office is restricted by role, protected against repeated password guessing, and every change to a record is logged with the account that made it. Photographs of artwork are served through a controlled proxy rather than as files anyone can address directly.

Changes

If we change this notice we will change the review date at the top. If the change is significant we will say so on the site.

Questions about any of this: write to info@jamarihomesltd.com or call +254 118 757 994.