Privacy & personal data

People covered by this notice

These rules apply to customers, prospective customers, website visitors, quotation/RFQ contacts, representatives of businesses and institutions, delivery recipients and other people whose personal information Corporate Furniture Kenya receives in connection with its website and business operations.

Who is responsible for your information

For personal information handled through this website and our direct business operations, Corporate Furniture Kenya determines the purposes for which relevant information is used. Privacy requests can be sent to sales@corporatefurniturekenya.co.ke.

Business location: Liberty Plaza, 1st Floor, Mombasa Road, Opposite The Imaara Mall, Nairobi, Kenya.

Information we may collect

The information we receive varies according to the way a person uses the website or deals with the business. We aim to collect only what is reasonably relevant to the order, enquiry, service, security need or measurement activity concerned.

• Identity and contact data: name, email address, phone number, company or organisation name and contact-person details.
• Order and transaction data: products, quantities, prices, discounts, delivery charges, order notes, invoices, payment status and transaction references.
• Billing and delivery data: billing address, delivery location, recipient details, landmarks, access instructions and delivery notes.
• Account data: username, account email, saved addresses, order history and account preferences. Website passwords are stored using WordPress authentication controls in protected hashed form rather than as readable passwords.
• Enquiry and correspondence data: contact-form messages, emails, WhatsApp enquiries, complaints and customer-support correspondence.
• Quotation, RFQ and tender data: product lists, quantities, procurement requirements, organisation details, uploaded documents/images and information contained in those files.
• Technical and usage data: browser/device information, page interactions, referrer data, IP/network information, cookie identifiers and security/diagnostic information.
• Marketing and attribution data: campaign source, UTM parameters and advertising identifiers such as GCLID, GBRAID, WBRAID or similar identifiers where the relevant technologies are enabled and permitted.

Where the information comes from

Most personal information is provided directly by the individual when placing an order, creating an account, contacting Corporate Furniture Kenya, requesting a quotation, providing delivery details or communicating with the business.

Some technical and marketing information may be generated automatically when the website is used, when an advertisement is interacted with, when a visitor arrives from another website or when a browser/device permits cookies or similar measurement technologies.

Why we use personal information

Corporate Furniture Kenya uses personal information for customer service, ecommerce, operational, legal, security and measurement purposes connected with the website and the sale or supply of furniture.

• Creating and managing customer accounts.
• Processing orders, quotations, invoices, payments, collections, deliveries, assembly, exchanges and returns.
• Responding to product questions, support requests, complaints and correspondence.
• Preparing quotations and responding to RFQs, procurement schedules and tender requirements.
• Maintaining transaction, accounting, tax, delivery and business records.
• Protecting the website, customers and Corporate Furniture Kenya against fraud, misuse, malicious uploads, unauthorised access and other security threats.
• Diagnosing errors, maintaining performance and improving the store experience.
• Measuring website events, conversions and advertising effectiveness using Google and Meta tools where enabled and permitted.
• Establishing, exercising or defending legal claims and resolving disputes.

Basis for processing

Depending on the context, Corporate Furniture Kenya may process personal information because it is necessary to take steps requested by the customer or perform a transaction, because a legal obligation applies, because there is a legitimate and proportionate business/security interest, or because consent has been given where consent is the appropriate basis.

Where processing relies on consent, consent may be withdrawn for future processing. Withdrawal does not automatically invalidate processing already carried out lawfully and may not affect information Corporate Furniture Kenya must retain or process for another lawful reason.

Store orders and customer accounts

The website uses WordPress and WooCommerce to operate product, cart, checkout, order and account functions. These systems process information needed to remember carts, authenticate users, create orders, maintain account records and support ecommerce administration.

Order and account information is accessible only to authorised personnel who need it for fulfilment, finance, customer service, delivery, returns or administration.

Payment-related information

Current Corporate Furniture Kenya payment arrangements include cash/M-PESA on delivery and bank transfer. Where payment is completed outside the website, we do not need to collect or store payment-card details through the website.

we may retain payment-status information, transaction references, invoice details and other accounting records needed to match payment to an order, manage refunds and maintain business records.

Quotes, RFQs and tender submissions

If procurement documents, product schedules, images, spreadsheets, PDFs or other files are submitted through a Corporate Furniture Kenya quotation/RFQ feature, those files may contain personal data or confidential business information.

Only information reasonably needed for the quotation should be uploaded. Passwords, banking credentials, unnecessary identity documents or other highly sensitive information should not be submitted unless Corporate Furniture Kenya has specifically requested it for a lawful and necessary purpose.

Where file upload is enabled, we may use file validation, quarantine and malware-scanning controls before staff access a file. Files may be rejected where their type, content, structure or security status does not meet the upload rules.

Website analytics and advertising measurement

we may use Google and Meta technologies to understand website activity and measure advertising performance. Measured events may include product views, searches, add-to-cart actions, checkout progress, purchases, quotation submissions, phone clicks and WhatsApp clicks.

we do not intend to send customer message text, passwords, uploaded tender/RFQ contents or other unnecessary personal content to analytics platforms. Ecommerce measurement should use product/order information and pseudonymous measurement identifiers rather than customer-identifying correspondence.

Cookies and browser technologies

The website uses cookies and similar technologies for cart, account, security, analytics and advertising functions. More information is provided in the Cookie Information page.

When information may be shared

we do not sell customer personal information. Information may be shared with service providers or authorities only where reasonably necessary for a service, business function, legal requirement or protection of legitimate rights.

• Delivery companies, couriers and logistics providers.
• Hosting, website, email, security, backup and technical-service providers.
• Payment and banking providers where needed to process or reconcile payments.
• Google, Meta and measurement/advertising providers where those tools are enabled and permitted.
• Professional advisers, auditors, accountants or legal advisers where reasonably necessary.
• Regulators, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law.

Processing outside Kenya

Some technology providers operate infrastructure in multiple countries. Where personal information is processed or stored outside Kenya, we aim to use providers and arrangements that support appropriate safeguards and to handle transfers in accordance with applicable data-protection requirements.

How long information is kept

Personal information is retained for as long as reasonably necessary for the purpose for which it was collected and for related legal, accounting, tax, warranty, fraud-prevention, security and dispute-resolution needs.

Order and business records may be retained for an extended period where continued recordkeeping is necessary. Information that is no longer required should be deleted, anonymised or otherwise handled in accordance with us’s operational and legal obligations.

Protecting information

Corporate Furniture Kenya uses reasonable administrative and technical measures intended to protect information against unauthorised access, accidental loss, misuse and alteration. No website or transmission method can be guaranteed to be completely secure, so customers should also protect their account credentials and avoid sending unnecessary sensitive information.

Your data-protection rights

Subject to the circumstances and applicable Kenyan data-protection law, individuals may have rights relating to information about processing, access, correction, deletion, restriction, objection and portability. A request may require reasonable identity verification before information is disclosed or changed.

To exercise a privacy right, contact sales@corporatefurniturekenya.co.ke and describe the request clearly enough for Corporate Furniture Kenya to identify the relevant records.

Marketing choices

Operational messages about an order, quotation, delivery, account or customer-service request may be sent where necessary to provide the requested service. Promotional communication, where used, should be sent in accordance with applicable requirements and available communication preferences.

Information relating to children

The Corporate Furniture Kenya website is a furniture retail and business-procurement service and is not intentionally directed at children. Customers should not submit a child’s personal information unless it is genuinely necessary and lawful for the relevant transaction.

Security incidents and privacy complaints

If you believe Corporate Furniture Kenya has handled personal information improperly, contact sales@corporatefurniturekenya.co.ke first so the concern can be investigated.

Individuals may also have the right to raise a data-protection complaint with Kenya’s Office of the Data Protection Commissioner (ODPC).

Updates to this privacy notice

we may update this Privacy Policy when business processes, website features, service providers or legal requirements change. The latest version published on the website applies from its stated update date.