Privacy Policy

Efisales Limited (“Efisales”, “we”, “us” or “our”) operates the Efimart mobile application and website (collectively the “Platform”). We are committed to protecting your personal data in full compliance with the Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and all guidelines issued by the Office of the Data Protection Commissioner (ODPC).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Platform. It forms part of our Terms and Conditions.

1. Information We Collect

We collect:

• Identity & contact data: full name, email address, phone number, business name, physical/business address.
• Account & transaction data: business registration details, order history, payment information (processed by third-party gateways).
• Technical & usage data: device ID, IP address, browser/app version, usage logs, location (city level only).
• Marketing data: your consent and opt-out preferences.

2. How We Use Your Information

We use your data to:

• Register and manage your account
• Process and fulfil orders
• Provide customer support
• Send important service notifications
• Improve and secure the Platform
• Send promotional offers, new product alerts, and marketing communications — only with your explicit consent

3. Lawful Basis for Processing

Under Section 30 of the Act, we rely on:

• Performance of a contract — registering your account, processing orders, providing Platform services.
• Your explicit consent — especially for direct marketing.
• Legitimate interests — fraud prevention and service improvement, where these do not override your rights.
• Legal obligation — compliance with Kenyan law, such as tax and anti-money-laundering requirements.

4. Direct Marketing & Promotional Communications

By signing up you explicitly consent to receive promotions, offers, and new product alerts via SMS, in-app notifications, email, and other electronic means for as long as your account is active.

You can withdraw this consent at any time (see Section 7) without affecting your ability to use the core ordering features of the Platform. To opt out:

• In-app: Settings → Notifications → disable “Promotions & Marketing”
• SMS: reply “STOP” or “UNSUBSCRIBE” to any promotional SMS
• Email: use the unsubscribe link at the bottom of any promotional email
• General: email support@efimart.co or call +254 118 640 908

We action opt-out requests within 7 days, include clear opt-out instructions in every marketing communication, and charge no fee for opting out. Once you opt out, we cease all direct marketing to you.

5. Sharing Your Personal Data

We share data only:

• With manufacturers and distributors, to fulfil your orders
• With trusted service providers (hosting, SMS gateways, payment processors) under strict data-processing agreements
• When required by Kenyan law

We never sell your personal data.

6. Data Transfers

All processing occurs in Kenya. Any future international transfer will comply with Sections 48–49 of the Act and will be notified to you.

7. Your Rights as a Data Subject

You have the right to:

• Access, correct, or delete your data
• Object to or restrict processing — an absolute right in the case of direct marketing
• Withdraw consent, including marketing consent
• Data portability, in a structured, machine-readable format
• Lodge a complaint with the ODPC

To exercise any right, contact our Data Protection Officer. We respond within 14 days, or the applicable statutory timeline.

8. Security & Retention

We use encryption, access controls, and regular audits (Section 41 of the Act). We keep your data only as long as necessary for the purposes above, or as required by Kenyan law, then securely delete or anonymise it.

9. Data Breaches

In the event of a personal data breach we will notify the ODPC and you, where required, without undue delay, in line with Section 43 of the Act.

10. Cookies & App Permissions

The website uses essential cookies. The app may request permissions for notifications, storage, and network access — you can manage these in your device settings.

11. Changes to This Policy

We may update this Policy. Material changes will be notified via the Platform or by email. Continued use after notification means you accept the changes.

12. Contact Us

© Efisales Limited 2026. All rights reserved.