Privacy

This notice explains what we do with information about you. We have tried to write it in plain language rather than in the language of a form.

Who we are

Jamari Homes Ltd is the data controller for the information described here. You can reach us at Nairobi, Kenya, on +254 118 757 994, or by email at info@jamarihomesltd.com.

[TO CONFIRM: company registration number, and the Office of the Data Protection Commissioner registration number once obtained.]

What we collect, and why

We collect four kinds of information, and only these.

When you make an enquiry

Your name, email address, telephone number, the nature of your enquiry and anything you choose to write in the message. We use it to answer you and to keep a record of the conversation so that a colleague can pick it up if the person you spoke to is away. We also store the network address the enquiry came from, for a short period, so that we can block automated abuse of the form.

When you open an account

Your name, email address and telephone number, and any delivery addresses you choose to save. Your password is never stored, only a one-way cryptographic hash of it, which cannot be turned back into your password by us or by anyone who obtained a copy.

When you place an order

What you bought, what you paid, the delivery address, and a record of the payment. We do not receive, see or store your card number. Card payments are handled entirely by our payment provider on their own systems; we are told only whether the payment succeeded and a reference for it. For M‑Pesa, we receive the transaction reference and the paying telephone number from Safaricom.

When you browse the site

We count page views so we know which pieces people are looking at, and we record how quickly pages loaded for you, so we can find the slow ones. We also count a few actions: a piece viewed, an article read, a search (how many results it found, never the words), a piece added to the basket, and an enquiry or order sent. All of it runs on our own server. We never collect what you type into a form, and we never place passwords, payment details or sign-in tokens into these records.

What happens next depends on the choice you make when you first arrive.

• If you decline, we set no measurement cookie at all. We hold only a short one-way code derived from your network address and browser, mixed with a secret that changes every day. It lets us count one day's visits without being able to recognise you tomorrow, and it cannot be turned back into your address.
• If you accept, we also set one cookie holding a randomly generated identifier. It lets us tell a returning visit from a new one, see which pages led to an enquiry or an order, and, once you sign in, join that history to your account. The identifier is random: it is not derived from your device, and we do not fingerprint your browser.

You can change your mind at any time, using the panel below. If your browser sends a "do not track" or Global Privacy Control signal, we record nothing at all, whatever you have chosen.

Cookies

Two kinds, and only two.

• Necessary. A session cookie when you sign in or put something in a basket, so the site remembers who you are between pages, and a small cookie remembering your chosen language and currency. These cannot be switched off without breaking the site. They are never used for advertising.
• Measurement. One cookie, set only if you accept it, holding a random identifier that helps us understand how the site is used. It is kept no longer than the measurement records themselves.

We set no advertising cookies and no third-party trackers of any kind. Nothing we measure is sold, and nothing is passed to anyone else for their own purposes. It is used by Jamari Homes, to improve this site and the service we give you, and for nothing else.

The showroom map on the Visit and Contact pages comes from Google. It loads only when you press “Show the map”, and nothing is sent to Google before then. Once it has loaded, Google’s own privacy policy covers what the map collects.

Our legal basis

• To perform a contract: processing your order, taking payment, delivering.
• Our legitimate interests: answering enquiries, preventing fraud and abuse of the forms, and understanding in aggregate how the site is used where that needs no cookie. We have considered your interests in each case, which is why measurement without your consent is designed not to identify you.
• Legal obligation: keeping records of sales for tax and accounting.
• Consent: the measurement cookie described above, and sending you news of new collections. You can withdraw either at any time: the panel above changes your cookie choice, and every message carries a link to unsubscribe.

Who we share it with

We do not sell your information and we do not share it for anyone else's marketing. We share what is necessary with: our payment providers, in order to take payment; the couriers and installation partners who deliver to you; our email provider, in order to send you the messages you are expecting; and our hosting provider, who stores the site and its database. Where the law requires it, we will disclose information to a regulator, a court, or the Office of the Data Protection Commissioner.

[TO CONFIRM: the named payment provider, courier partners and hosting provider should be listed here before launch.]

Where your information is held

The site and its database are hosted [TO CONFIRM: country of the hosting account]. Some of our providers may process information outside Kenya. Where they do, we rely on the safeguards permitted under section 49 of the Data Protection Act 2019 and, for information about visitors in the European Union or the United Kingdom, on the standard contractual clauses.

How long we keep it

• Enquiries: kept while the conversation is live and for a reasonable period afterwards so we can pick up a returning client's history, then deleted.
• Accounts: for as long as your account is open. Close it and we delete it, apart from what we must keep for tax.
• Orders and payment records: [TO CONFIRM: seven years is the usual Kenyan retention period for accounting records; confirm with your accountant].
• Site measurement: no more than 400 days. If you declined the measurement cookie, a record cannot identify you after the day it was made.

Your rights

You have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted, to object to our using it, to ask us to restrict how we use it, and to receive it in a portable form. You can exercise any of these by writing to info@jamarihomesltd.com. We will respond within the statutory period. You can correct most of your own details yourself at any time under My details.

If you are not satisfied with how we have handled your information you can complain to the Office of the Data Protection Commissioner in Nairobi. If you are in the European Union or the United Kingdom you may also complain to your local supervisory authority.

Security

The site is served over an encrypted connection. Passwords are stored only as one-way hashes. Access to the back office is restricted by role, protected against repeated password guessing, and every change to a record is logged with the account that made it. Photographs of artwork are served through a controlled proxy rather than as files anyone can address directly.

Changes

If we change this notice we will change the review date at the top. If the change is significant we will say so on the site.

Questions about any of this: write to info@jamarihomesltd.com or call +254 118 757 994.