Privacy Policy

Senses Hub ("we", "us", "our") is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019. This policy explains what data we collect, why we collect it, how we use it, and your rights as a data subject.

1. Who We Are

Senses Hub is an assistive technology organisation based in Nairobi, Kenya, operating senseshub.vision. We are the Data Controller for personal data collected through this website and our online shop.

2. Data We Collect

Information you give us

• Identity: first name, last name
• Contact: email address, phone number, delivery address
• Order: products ordered, quantities, order value, order history
• Payment: M-Pesa transaction reference, card type and last four digits — we never store full card numbers
• Account: username and hashed password
• Communications: messages sent via contact form, email, or WhatsApp

Information collected automatically

• Technical: IP address, browser type, device type, time zone
• Usage: pages visited, time on page, referral source
• Cookies: session, preference, and analytics identifiers — see our Cookie Policy

3. How We Use Your Data

Purpose	Legal basis
Process and fulfil your order	Performance of a contract
Send order confirmations and shipping updates	Performance of a contract
Create and manage your account	Performance of a contract
Process payments and prevent fraud	Legal obligation / legitimate interests
Respond to enquiries and provide customer support	Legitimate interests
Send newsletters (if you opted in)	Consent
Improve our website through analytics	Legitimate interests
Comply with legal and regulatory obligations	Legal obligation

4. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted parties who help us deliver our services:

• Payment processors: M-Pesa (Safaricom) and card payment gateways — for payment authorisation and fraud prevention
• Delivery partners: courier and logistics companies — to fulfil and track your order
• Cloud hosting: our server infrastructure provider — to store data securely
• Analytics tools: anonymised usage data only, to improve site performance
• Legal authorities: where required by Kenyan law or to protect our legal rights

All processors are contractually bound to handle your data securely and only for the purpose specified.

5. Data Retention

• Order records: 7 years (Kenya Revenue Authority requirements)
• Customer accounts: active period plus 2 years after last login
• Marketing consent records: until you withdraw consent
• Support communications: 2 years

6. International Transfers

Some service providers (e.g. cloud hosting, analytics) may process data outside Kenya. Where this occurs, we ensure appropriate safeguards consistent with the Data Protection Act, 2019 and ODPC guidelines.

7. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erasure of data where there is no legal basis to retain it
• Object to processing based on legitimate interests or direct marketing
• Restrict processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is consent-based

To exercise any right, email info@senseshub.vision. We respond within 21 days. If unsatisfied, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

8. Security

We use appropriate technical and organisational measures to protect your data. Passwords are hashed and never stored in plain text. Payment data is handled exclusively by PCI-DSS-compliant processors.

9. Children

Our services are not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this policy periodically. Material changes will be notified by email or a notice on this website. The "last updated" date above reflects the most recent revision.