Welcome to Kiddy Toys Website. We are committed to protecting the privacy and security of our visitors and customers in accordance with Kenya’s Data Protection Act, 2019, and related regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, Kiddytoys, and purchase our products.

1. Data Controller

Kiddy Toys, located at Royal Palms Mall Wing A, Af11 Nairobi, is the data controller responsible for your personal information under the Data Protection Act, 2019.

2. Information We Collect

2.1 Personal Data You Provide

• Account Registration: Name, email address, password, postal address, and telephone number.
• Order Processing: Billing and delivery details, payment information (processed via PCI-compliant third-party processors), and purchase history.
• Customer Support: Name, email, phone number, and correspondence details.
• Marketing Opt‑Ins: Email address and preferences when you subscribe to newsletters or promotions.

2.2 Automatically Collected Data

• Technical Data: IP address, browser type and version, operating system, device identifiers, and referral URLs.
• Usage Data: Pages visited, time spent on pages, clickstream data, and search queries.
• Cookies & Similar Technologies: We use cookies and web beacons to enhance site functionality, analyze traffic, and personalize content. You can manage cookie preferences via your browser settings; disabling cookies may limit some site features.

3. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your personal data based on the following lawful grounds:

• Contract Performance: To fulfill orders and manage your account.
• Consent: Where you have given consent for marketing communications.
• Legal Obligation: To comply with tax, accounting, and other statutory requirements (e.g., KRA VAT records).
• Legitimate Interests: To improve our website, prevent fraud, and secure our systems, provided your rights do not override these interests.

4. How We Use Your Information

• Order Fulfillment & Delivery: Process, package, and ship your orders; send confirmations and delivery updates.
• Account Management: Authenticate your identity, maintain account security, and provide customer service.
• Communications: Send transactional messages, respond to inquiries, and deliver marketing content (with your consent).
• Personalization & Recommendations: Tailor product suggestions and site content based on your preferences and browsing behavior.
• Analytics & Improvement: Monitor site performance, analyze trends, and enhance user experience.
• Compliance & Reporting: Maintain records for KRA audits and comply with legal obligations.

5. Sharing Your Data

We may share your personal data with:

• Service Providers: Payment gateways, delivery/courier services, email and SMS platforms, and IT support vendors—each bound by confidentiality and limited-use agreements.
• Regulatory Authorities: Where required by law, including the Office of the Data Protection Commissioner (ODPC) or Kenya Revenue Authority (KRA).
• Business Transfers: In connection with mergers, acquisitions, or asset sales, ensuring continued protection of your data.
• Consent-Based Sharing: Other third parties if you explicitly consent.

6. International Transfers

If we transfer data outside Kenya (e.g., cloud servers), we ensure adequate safeguards, such as standard contractual clauses, are in place to protect your personal data.

7. Data Security & Retention

We employ administrative, technical, and physical measures to protect your data against unauthorized access, loss, or alteration. We retain personal data only as long as necessary for the purposes outlined, statutory obligations (e.g., 7 years for tax records), or until you request deletion, subject to legal requirements.

8. Your Rights

Under Kenyan law, you have the right to:

• Access and obtain a copy of your personal data.
• Request correction or updating of inaccurate data.
• Request deletion or restriction of processing under certain conditions.
• Object to processing for direct marketing.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with the Office of the Data Protection Commissioner: https://www.odpc.go.ke/

To exercise your rights, please contact us at larryrenison@gmail.com. We may request proof of identity before processing your request.

9. Children’s Privacy

Our services are not directed at children under 13 years. We do not knowingly collect personal data from minors. If you believe we have collected such data, please contact us for prompt deletion.

10. Third‑Party Links

Our site may contain links to third‑party websites. We are not responsible for their privacy practices. Please review their policies before providing personal information.

11. Updates to This Policy

We may update this policy to reflect changes in law or our practices. We will revise the “Last updated” date and notify you by posting the new policy on our site.

12. Contact Us

For any questions or concerns regarding this Privacy Policy, reach out to:

Email: larryrenison@gmail.com

 Phone:+254794324980

Thank you for trusting Kiddy Toys. We are dedicated to safeguarding your privacy in line with Kenya’s data protection standards.