Privacy Policy

1.1 Personal Information

We may collect personal identification information, including but not limited to:

• Name, email address, phone number, and business information
• Billing information and transaction details
• Login credentials and account preferences
• Business location and time zone information

1.2 Usage Data

We collect information on how you interact with our service, including:

• Access times, pages viewed, and system activity
• Device information, IP address, and browser type
• Performance data and error reports
• Feature usage patterns and preferences

1.3 Customer Data

Information you process through our services, such as customer transactions, inventory, and sales data, is considered your data, and we process this information according to your instructions and this Privacy Policy.

We use the collected information for various purposes, including:

• Providing, maintaining, and improving the Shop Craft Enterprise platform
• Processing transactions and sending related notifications
• Offering customer support and responding to inquiries
• Sending administrative messages, updates, and security alerts
• Understanding user behavior to enhance user experience
• With your consent, sending marketing communications about our services

We implement appropriate technical and organizational measures to secure your personal data, including:

• End-to-end encryption for data transmission
• Regular security assessments and penetration testing
• Secure data storage with restricted access controls
• Employee training on privacy and security practices
• Compliance with industry security standards

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Your data is stored on secure servers located in Kenya, with backup systems in approved data centers in Europe that comply with relevant data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable.

Your information, including personal data, may be transferred to and maintained on computers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure that any such transfers comply with applicable laws and that your data remains protected according to this Privacy Policy.

For users in the European Economic Area (EEA), we take additional measures to ensure that your personal data receives an adequate level of protection when transferred outside the EEA, including implementing Standard Contractual Clauses approved by the European Commission.

Depending on your location, you may have certain rights regarding your personal data, including:

• The right to access, update, or delete your personal information
• The right to rectification if your information is inaccurate or incomplete
• The right to object to or restrict our processing of your data
• The right to data portability
• The right to withdraw consent where we rely on consent to process your data

To exercise these rights, please contact us using the details provided in the "Contact Us" section.

We use cookies and similar tracking technologies to track activity on our platform and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our platform.

We may employ third-party companies and individuals to facilitate our service, provide the service on our behalf, perform service-related tasks, or assist us in analyzing how our service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We will disclose your personal data where required to do so by law or in response to valid requests by public authorities. We comply with applicable data protection laws, including Kenya's Data Protection Act, 2019, and where applicable, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy, please contact us: