Our Commitment to Your Privacy
At Candy Furniture Limited, your privacy is paramount. This Privacy Notice details how we collect and process your personal information when you interact with our digital platforms, including our website and mobile applications. It outlines our data management practices, robust security measures, and your rights concerning your data.
Who We Are
Candy Furniture Limited is the leading pan-African e-commerce platform. Our comprehensive ecosystem features a dynamic marketplace that connects sellers with consumers, an efficient logistics service for seamless deliveries, and a secure payment service for all transactions across our active markets. This digital experience, whether on our website or mobile app, is managed by a member of the Candy Furniture Limited group, with Candy Furniture Limited as the ultimate holding company. For details on our subsidiaries, please visit our website. Any personal data you provide or that we collect is meticulously managed by the specific subsidiary responsible for the platform you’re using.
The Data We Collect About You
Personal data is any information that can directly or indirectly identify an individual. We collect your data to offer tailored products and services and to continually enhance our offerings through insightful analysis. This may involve collecting, using, storing, and transferring various types of personal data for marketing and optimization. To provide you with relevant offers, Candy Furniture Limited also utilizes Google Digital Marketing.
You entrust us with your personal data when you register and conduct transactions on our platforms. The personal data we collect includes:
Information You Provide Directly
We securely receive and store the information you share, such as your identity, contact details, biometric data, delivery address, and financial information. This may include:
- Contact Information: Your name, postal addresses, phone numbers, and email addresses.
- Demographic Insights: Your date of birth, age range, and gender.
- Online Registration Credentials: Your password and other authentication information.
- Payment Specifics: Credit card details and billing address.
- Survey Responses: Feedback from customer satisfaction surveys or market research.
- Competition Entries: Information submitted for competitions.
- Marketing Preferences: Your choices regarding marketing communications.
Information We Collect Automatically or Obtain from Third Parties
We automatically collect and store data about your interactions with the Candy Furniture marketplace, including your searches, views, downloads, and purchases. We may also receive information about you from trusted third parties like carriers, payment service providers, merchants/brands, and advertising partners. This data can pertain to your device (e.g., PC, tablet, or mobile device), your usage of our platforms (and selected third-party websites we collaborate with), and your personal preferences, interests, or geographic location.
Examples of automatically collected information include:
- Identity Details: Your name and predicted age range.
- Device Information: Details about your device, operating system, browser, and IP address.
- Unique Identifiers: Identifiers associated with your device.
- Browse Activity: Specific web pages you’ve visited.
- Product Interactions: Products you’ve viewed online (including those you’ve searched for, purchased, or added to your shopping basket).
- Usage Patterns: Duration of your visits to specific areas of our website or app, along with dates and times.
- User-Generated Content: Personal data embedded within blogs and social media posts.
- Social Media Information: Your social media username, ID, profile photos, and other profile details (e.g., follower count).
We are dedicated to providing you with clear choices regarding your Personal Data. Where legally required, if you wish for Candy Furniture Limited to use your Personal Data for a personalized experience, including targeted advertising and content, you can indicate this via the tick-box(es) on our registration form or by answering questions posed by our representatives. If you decide to opt out of this personalization later, you can adjust your preferences or close your account at any time by emailing sales@candyfurniture.co.ke. You can also close your account by clicking [this link](insert actual link here) and following the instructions. Please note that once your account is closed, all associated products and services will no longer be available.
Cookies and Other Identifiers
A cookie is a small alphanumeric file placed on your computer, mobile phone, or tablet with your consent. Cookies help us distinguish you from other users, enhancing your Browse experience. For a complete understanding of cookies and their usage, please refer to our Cookie Notice.
How We Use Your Personal Data
We use your personal data to efficiently operate, deliver, refine, and innovate our products and services. This includes:
- Customer Registration: Facilitating your registration as a new customer.
- Order Fulfillment: Processing and delivering your orders accurately.
- Relationship Management: Nurturing our relationship with you.
- Engagement: Enabling your participation in promotions, competitions, and surveys.
- Platform Improvement: Continuously enhancing our website, applications, products, and services.
- Personalized Recommendations: Recommending and advertising products or services that align with your interests.
- Partner Access: Granting you access to specific products and services from our trusted partners and vendors.
- Legal Compliance: Fulfilling our legal obligations, including identity verification when necessary.
- Fraud Prevention: Proactively detecting and preventing fraud.
Legal Basis for Processing Personal Data
We only process your personal data when a valid legal basis exists, which varies depending on the purpose of collection and use. In most instances, the legal basis will be one of the following:
- Consent: For example, when you’ve explicitly agreed to receive marketing communications. You can withdraw your consent anytime by clicking the “unsubscribe” link at the bottom of our marketing emails.
- Our Legitimate Business Interests: Processing essential for understanding our customers, promoting our services, and operating effectively, provided this is legitimate and does not unduly impact your privacy rights.
- Performance of a Contract: Necessary for fulfilling a contract with you or taking steps before entering a contract. For instance, when you buy a product, we use your contact and payment information to process and deliver your order.
- Compliance with Law: When we are subject to a legal obligation that requires the use of your personal data.
How We Share Your Personal Data
We may share your personal data with third parties for specific purposes:
- Sale of Products and Services: To facilitate the delivery of products and services purchased from third parties on our marketplace, we may share your data with them.
- Collaboration with Third-Party Service Providers: We engage trusted third parties to perform functions on our behalf, including order fulfillment, package delivery, data analysis, marketing assistance, payment processing, content transmission, credit risk assessment and management, and customer service.
- Business Transfers: As we evolve, we may acquire or divest other businesses or services. In such cases, customer information may be transferred as a business asset.
- Fraud Detection and Abuse Prevention: We may share account and other personal data with companies and organizations for fraud protection, credit risk reduction, and to ensure compliance with applicable law.
When sharing your personal data with third parties, we:
- Require them to use your data strictly according to this Privacy Notice, our Privacy Policy, and applicable law.
- Permit them to process your personal data solely for specified purposes under our explicit instructions. We do not authorize our third-party service providers to use your personal data for their own independent purposes.
International Transfers
Your personal data may be transferred to other countries, provided such transfers are permissible under your jurisdiction’s applicable laws. While we acknowledge inherent risks, we implement necessary safeguards to protect your data, ensuring a level of protection equivalent to that available in the country of data origin. We remain committed to upholding your legal rights as stipulated by this Privacy Notice and the applicable laws in your location.
Data Retention
We ensure your personal data is processed only for the minimum duration required for the purposes outlined in this Privacy Notice. Your Personal Data will be retained in an identifiable format only as long as:
- We maintain an ongoing relationship with you to continually enhance your experience and ensure you receive relevant communications.
- Your Personal Data remains necessary for the purposes set forth in this Privacy Notice, and we have a valid legal basis for its retention.
- The duration of any applicable limitation period (i.e., any period during which a person could bring a legal claim against us).
We regularly review the personal data we hold and securely delete it, or in some cases anonymize it, when there’s no longer a legal, business, or consumer necessity for its retention.
Data Security
We have implemented robust security measures to safeguard your personal data from accidental loss, unauthorized use or access, alteration, or disclosure. Access to your personal data is restricted to employees, agents, contractors, and other third parties who demonstrate a legitimate business need. These individuals process your personal data strictly on our instructions and are bound by confidentiality. We have established comprehensive procedures to address any suspected personal data breaches and will promptly notify you and any applicable regulator where legally mandated.
Your Legal Rights
Maintaining accurate and current personal data is crucial, and we encourage you to keep us informed of any changes throughout our relationship.
Under specific circumstances, data protection laws grant you rights concerning your personal data. These include the right to access, correct, or erase your personal data, object to or restrict its processing, request its transfer to a third party, and unsubscribe from our emails and newsletters.
Should you wish to permanently delete your data from our website and other applications, you have the option to close your account. Please note that once your account is closed, all associated products and services will no longer be available.
We reserve the right to decline your request if it’s deemed unreasonable or if you fail to provide the necessary additional information to verify your identity.
Data Controllers & Contact
For any inquiries or concerns regarding Candy’s Privacy Notice, further information on how we process your personal data, or to exercise your legal rights, please contact our Data Privacy Officer via email at order@candyfurniture.co.ke.
We are committed to investigating any complaint regarding our Personal Data management practices and ensuring a timely response to all substantiated complaints within prescribed timelines.