Privacy Policy — Colorshade Graphics, Nairobi Kenya (Kenya DPA 2019)

1. Who We Are & Our Commitment

Colorshade Graphics ("we", "us") of Printers Center Building, 3rd Floor, Kirinyaga Road, Nairobi, respects your privacy. This policy explains how we handle personal data in line with the Kenya Data Protection Act, 2019 (DPA) — across this website, WhatsApp, email, and in-person orders.

2. What We Collect

• Contact data: your name, phone/WhatsApp number and email address, when you send a quote request, use the contact form, or order in person.
• Order data: the products, quantities, artwork files and delivery locations attached to your orders — including names or serial ranges you ask us to print or engrave.
• Quote list (your browser only): products you add to the on-site quote list are stored in your own browser's local storage. They never reach our servers until you choose to send the list via WhatsApp.
• Payment references: when you pay, we record the transaction reference (e.g. M-Pesa code) and amount for receipting and accounting. We never see or store card numbers or M-Pesa PINs.
• Technical data: standard, anonymous web-server logs (IP address, browser type) used for security and troubleshooting.

3. Why We Use It

We process data strictly to serve you — under the DPA bases of contractual necessity and legitimate interest:

• To prepare quotations and layout proofs, and to produce your order accurately.
• To arrange delivery or an on-site engraving visit at the location you give us.
• To receipt payments and keep the accounting records Kenyan law requires.
• To answer your questions and follow up on active orders.

We send marketing broadcasts (e.g. price updates) only to customers who opt in — for example by joining our WhatsApp broadcast list — and you can leave at any time by replying STOP.

4. Who We Share It With

We operate a zero-sale policy: your data is never sold or rented. We share only what a job requires:

• Couriers: your name, phone number and delivery address — only for shipping your order.
• Payment providers: Safaricom (M-Pesa) and our bank process payments on their own compliant platforms.
• Authorities: the Kenya Revenue Authority, for lawful tax and receipting obligations.

WhatsApp conversations are carried by Meta's WhatsApp service under its own encryption and privacy terms.

5. How Long We Keep It

• Financial records (invoices, receipts, payment references): retained as required by Kenyan tax law.
• Artwork and order files: kept for a reasonable period so reprints and reorders are effortless; you may ask us to delete your files at any time after an order is complete.
• Enquiries that don't become orders: deleted or anonymised within a reasonable period.

6. Security & Breach Notification

We apply appropriate technical and organisational safeguards to protect your data. In the unlikely event of a breach affecting your personal data, we follow the DPA's requirement to notify the Office of the Data Protection Commissioner (ODPC) and affected customers within 72 hours of discovery.

7. Your Rights Under the DPA 2019

You have the right to:

• Access — ask what personal data we hold about you;
• Correction — have inaccurate details fixed;
• Erasure — ask us to delete your data, subject to legal retention duties;
• Objection — object to processing, including opting out of any marketing.

To exercise any of these, contact info@colorshade.co.ke or WhatsApp +254 712 432531. We respond within a reasonable time and in any case within the period the DPA prescribes.

8. Cookies & Local Storage

This site does not use advertising or tracking cookies. Your quote list lives in your browser's local storage on your device — clearing your browser data empties it. Any analytics we may add will be aggregate and anonymous, and this policy will be updated first.