1. Information You Give Us

Depending on how you interact with us, we may collect:

• Your name, phone number, email address and business name, where provided.
• Billing, delivery or service-site details, such as your address, town and county.
• Order, quotation, invoice and payment transaction references.
• Messages and information you share when requesting product guidance, installation, maintenance or technical support.

2. Information Collected When You Use the Website

When you visit our website, technical information may be recorded, including your IP address, browser and device type, pages viewed, visit date and time, and diagnostic data. This information can help us operate the website, understand how it is used and investigate technical or security issues.

3. How and Why We Use Information

• Respond to enquiries and prepare quotations for products or services.
• Process orders, confirm payments and arrange delivery or collection.
• Schedule and provide agreed installation, maintenance or technical support services.
• Send updates about an order, quotation, service appointment or support request.
• Maintain the website, investigate problems and help prevent fraud or misuse.
• Maintain business records and meet legal obligations.
• Send marketing communications where permitted. You can ask us to stop at any time.

Depending on the purpose, we process information to take steps you request before an agreement, fulfil an agreement with you, comply with a legal obligation, pursue a legitimate interest where your rights permit, or act on your consent where required.

4. Payments and Transaction Information

Your payment method may involve a mobile money provider, bank or other payment provider. We may keep the transaction reference, payment status and related invoice or order records to confirm payment and resolve payment enquiries. Keep your M-PESA PIN, banking passwords and one-time codes private.

5. Who May Receive Information

We may share information needed for a specific task with couriers, payment providers, website hosting providers, communications platforms or technical service providers. For example, a courier may receive the recipient’s name, phone number and delivery address.

We may also disclose information when legally required or when lawfully necessary to protect our customers, systems or legal rights. Masterpiece Systems Limited does not sell personal information.

6. Cookies and Embedded Content

Our website may use cookies to support features such as the shopping cart and to remember preferences. If optional analytics or advertising cookies are enabled, see the site’s cookie notice or settings for details and available choices. You can also manage cookies through your browser. Blocking some cookies may affect website features.

Our Contact Us page includes an embedded Google Maps view. When the map loads, Google may receive technical information such as your IP address and browser details. See Google’s Privacy Policy for information about its practices.

7. Retention and Processing Outside Kenya

We keep personal information for as long as needed for the purpose it was collected, including handling enquiries, fulfilling orders, providing support, keeping business records and meeting legal obligations.

Some service providers may store or process information outside Kenya. Where a transfer takes place, we apply the conditions and safeguards required under applicable Kenyan data-protection law.

8. Protecting Personal Information

We use reasonable safeguards to help protect personal information from unauthorised access, loss, misuse or disclosure. If you believe information you shared with us may have been exposed, contact us using the details below.

9. Your Data-Protection Rights

Under Kenya’s Data Protection Act, you have the right to be informed about how your personal data is used, access your personal data, object to its processing, and request correction or deletion of false or misleading data. Where the applicable conditions are met, you may also request erasure, restriction or portability of your data. You may withdraw consent where we rely on it.

To exercise a right, contact us using the details below. We may ask for information to verify your identity. You may also file a complaint with Kenya’s Office of the Data Protection Commissioner.

10. Other Websites

Our website may link to external services or websites. Review their privacy policies before sharing personal information with them.

11. Changes to This Policy

We may update this policy as our website, services or information practices change. The latest version will appear on this page.