Privacy policy

1. Introduction

Welcome to Roshan Accessories ("we", "us", "our", or the "Company").
We operate https://roshan.com and the Roshan Accessories mobile/web application (collectively, the "Platform"), through which users may browse, purchase, and receive accessories and related products.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access or use our Platform.
By using our Platform, creating an account, placing an order, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect information necessary to provide, secure, and improve our services.

2.1 Information You Provide

Depending on how you use the Platform, we may collect:

• Full name
• Email address
• Telephone or mobile number
• Billing address
• Shipping/delivery address
• Account information
• Order history
• Products purchased
• Payment-related transaction information
• Reviews, feedback, or other information you voluntarily submit

You may browse certain portions of the Platform without creating an account.

2.2 Information Collected Through Social Authentication

We may allow you to register or sign in using third-party authentication services, including, where supported:

• Google
• Microsoft
• Facebook
• X
• Other authentication providers that we may introduce in the future

If you select a social-login option, you will be redirected to or otherwise interact with the selected authentication provider.
After successful authentication, the provider may provide us with limited information necessary to create or authenticate your account.
This information may include:

• Your name
• Email address
• Profile picture
• Provider-specific user identifier
• Other information that you authorize the provider to share

The exact information received depends on the provider, your account settings, and the permissions you authorize.

We do not receive or store your social-media password.

Your use of a social-login provider is also subject to that provider's own terms and privacy policy.

2.3 Payment Information

When you purchase products through our Platform, we may collect information necessary to process and record the transaction.
This may include:

• Transaction amount
• Currency
• Payment method
• Payment status
• Payment-provider transaction identifier
• Payment-provider reference
• Telephone number associated with a mobile-money transaction, where applicable
• Other non-sensitive payment information necessary to reconcile the transaction

Where payments are processed by third-party payment providers, sensitive payment credentials may be collected and processed directly by those providers.
Unless expressly stated otherwise, we do not intentionally store complete payment-card numbers, CVV/CVC codes, card PINs, or payment passwords on our own servers.

2.4 Automatically Collected Information

When you use our Platform, we may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Language and regional settings
• Pages and products viewed
• Search and interaction information
• Date and time of access
• Referring website
• Application and device identifiers
• Error and diagnostic information
• Security and fraud-related information

2.5 Cookies and Similar Technologies

We use cookies and similar technologies to provide essential functionality, remember preferences, maintain sessions, secure accounts, maintain shopping carts, and understand Platform usage.
Additional information is provided in our Cookie Policy.

3. How We Use Personal Information

We may use personal information to:

1. Create and manage customer accounts.
2. Authenticate users.
3. Process and fulfill orders.
4. Process and reconcile payments.
5. Deliver purchased products.
6. Communicate with customers regarding orders.
7. Provide customer service.
8. Send transactional emails and notifications.
9. Prevent fraud and unauthorized transactions.
10. Protect the security of our Platform.
11. Diagnose and resolve technical problems.
12. Improve our products, services, and user experience.
13. Maintain business and financial records.
14. Comply with applicable legal obligations.
15. Enforce our Terms & Conditions.
16. Protect our legal rights and the rights of our users.
17. Send marketing communications where permitted by law and where required consent has been obtained.

4. Legal Bases for Processing

Where applicable data-protection law requires a legal basis for processing personal information, we may process information on the basis of:

• Performance of a contract with you;
• Compliance with a legal obligation;
• Your consent;
• Our legitimate business interests, provided those interests do not override applicable privacy rights;
• Protection of the security and integrity of our Platform;
• Other lawful bases permitted by applicable law.

Where we rely on consent, you may withdraw that consent where permitted by law.

5. How We Share Personal Information

We do not sell your personal information. We may disclose information to third parties where reasonably necessary to provide our services.

5.1 Payment Providers

We may share necessary information with payment providers such as MPESA / PAYPAL / OTHER PROVIDER to process payments and confirm transactions.

5.2 Delivery Providers

We may provide delivery partners with information such as your:

• Name
• Telephone number
• Delivery address
• Order information

This is necessary to fulfill your order.

5.3 Authentication Providers

If you use social authentication, the selected authentication provider processes your authentication request and may provide us with information necessary to authenticate and create your account.

5.4 Technology and Hosting Providers

We may use third-party providers for:

• Cloud hosting
• Database infrastructure
• Email delivery
• File storage
• Error monitoring
• Security
• Analytics
• Backups
• Technical support

These providers may process personal information on our behalf.

5.5 Legal and Regulatory Disclosure

We may disclose information when reasonably necessary to:

• Comply with applicable law;
• Respond to lawful governmental requests;
• Protect our rights or property;
• Prevent fraud;
• Investigate security incidents;
• Protect users or the public; or
• Enforce our agreements.

6. Social Authentication

When you authenticate through a social provider, we use the information received from that provider to:

• Identify your account;
• Create or update your customer profile;
• Authenticate future sign-ins;
• Associate purchases with your account; and
• Provide account-related services.

We do not use your social-media password.
If you disconnect or stop using a social provider, information already associated with your account may remain in our systems unless you request deletion or applicable law requires otherwise.

7. Marketing Communications

We may send you transactional communications necessary to operate your account or fulfill your orders.
Examples include:

• Order confirmations;
• Payment confirmations;
• Shipping notifications;
• Password or authentication notifications;
• Account-security alerts.

Where legally permitted and where appropriate consent has been obtained, we may also send promotional communications.
You may unsubscribe from promotional communications using the unsubscribe mechanism included in the communication or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending essential transactional or security-related communications.

8. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal information.
These measures may include:

• Encryption in transit;
• Access controls;
• Authentication mechanisms;
• Secure server infrastructure;
• Logging and monitoring;
• Backup procedures;
• Security updates; and
• Restricting employee or contractor access to information where appropriate.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
We may retain information for longer where necessary to:

• Fulfill contractual obligations;
• Maintain accounting or tax records;
• Comply with legal requirements;
• Resolve disputes;
• Prevent fraud;
• Maintain security records; or
• Establish, exercise, or defend legal claims.

When information is no longer required, we may delete, anonymize, or securely dispose of it.

10. Your Rights

Depending on applicable law, you may have rights including:

• The right to access personal information we hold about you;
• The right to correct inaccurate information;
• The right to request deletion;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to withdraw consent where processing relies on consent;
• The right to request a copy of certain personal information; and
• The right to lodge a complaint with a competent data-protection authority.

Some rights may be subject to legal limitations.
To exercise a privacy right, contact us using the information in Section 17.

11. Account Deletion

You may request deletion of your account by contacting us.
Upon receiving a valid deletion request, we will take reasonable steps to delete or anonymize personal information associated with your account, subject to information that we are legally required or legitimately permitted to retain.
Deleting your account may prevent you from accessing:

• Previous orders;
• Saved account information;
• Account history;
• Other account-related features.

12. Children's Privacy

Our Platform is not intended for children who are below the minimum age permitted to use the service under applicable law.
We do not knowingly collect personal information from children in circumstances where parental or guardian authorization is legally required unless such authorization has been obtained.
If you believe that a child has provided personal information to us improperly, please contact us.

13. International Data Transfers

Our service providers may operate in countries different from your country of residence.
As a result, personal information may be processed or stored internationally.
Where applicable law imposes requirements on international transfers, we will take reasonable measures to comply with those requirements.

14. Third-Party Websites and Services

Our Platform may contain links to third-party websites and services.
We are not responsible for the privacy practices, content, security, or policies of third-party services.
You should review the privacy policy of any third-party service before providing personal information to it.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make changes, we will update the "Last Updated" date at the beginning of this document. Where required by law, we will provide additional notice regarding material changes.

16. Data Controller

For purposes of applicable data-protection law, the entity responsible for processing your personal information is:

Roshan Accessories

Trading Name: Roshan Accessories

Address: Nairobi, KE

Email: contact@roshan.com

Telephone: 0712017747

17. Contact Us

For privacy questions, requests, or complaints, contact:

Roshan Accessories

Privacy Email: contact@roshan.com

Telephone: 0712017747

Address: Nairobi, KE

By contacting us, please provide sufficient information for us to understand and respond to your request.