Privacy Policy

Effective Date: 4th October 2024

Suitcase Savvy (“we,” “us,” or “our”) operates the website suitcasesavvyke.com (the “Website”) and is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, share, and protect the personal information of users (“you” or “your”) who interact with the Website. This policy is fully compliant with the General Data Protection Regulation (GDPR) and other applicable laws regarding personal data protection.

1. Data Controller

The data controller for this website is:

Business Name: Suitcase Savvy
Business Address: Syokimau, Ellan Park Access Road, Nairobi, Kenya
Email: [email protected]

2. Personal Data We Collect

We collect the following personal data from users:

Personal Identification Information: Name, email address, shipping address, billing address, phone number, and other details necessary for order processing.
Payment Information: Credit card details or payment account information (handled securely by third-party payment processors).
Technical Data: IP address, browser type, operating system, and device identifiers.
Usage Data: Information on how you use the Website, including pages visited, products viewed, and time spent on the Website.
Marketing and Communication Preferences: Your preferences in receiving marketing communications and your communication preferences.

3. How We Collect Your Data

We collect your personal data through various means:

Direct Interactions: When you provide information by filling out forms on our Website, making purchases, subscribing to newsletters, or contacting us directly.
Automated Technologies: As you navigate the Website, we automatically collect technical data such as browsing actions, patterns, and IP addresses via cookies and other tracking technologies.
Third-Party Sources: We may receive information about you from third-party sources such as payment processors or marketing partners.

4. How We Use Your Data

We use your personal data for the following purposes:

Order Fulfillment: To process and deliver your orders, manage payments, and communicate with you about your purchase.
Customer Service: To respond to your inquiries, complaints, and requests for support.
Marketing Communications: To send promotional offers, newsletters, and updates if you have opted in. You can opt out at any time.
Improvement of Website Experience: To analyze and improve the functionality and content of our Website and ensure it meets your expectations.
Legal Obligations: To comply with any applicable laws and regulations or respond to legal processes, including enforcing our terms and conditions.

5. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

Performance of a Contract: When necessary to fulfill a purchase or service contract with you.
Consent: Where you have provided consent for specific processing activities, such as receiving marketing emails.
Legitimate Interests: For the purpose of running our business, such as improving our services and offering a personalized experience.
Compliance with Legal Obligations: When processing is necessary to comply with applicable laws and regulations.

6. Sharing Your Data

We only share your personal data with trusted third parties when necessary and only for the purposes outlined in this policy:

Payment Processors: For secure handling of payment transactions.
Shipping Providers: To fulfill your orders and ensure timely delivery.
Marketing Service Providers: To manage email campaigns, advertising, and promotions (only with your consent).
Legal Authorities: If required by law or necessary to protect our legal interests.

We do not sell or rent your personal data to third parties.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting purposes. After that period, your data will be deleted or anonymized unless a longer retention period is required by law.

8. Security Measures

We take the protection of your data seriously and employ reasonable security measures, including:

Encryption: Sensitive data, such as payment details, is encrypted during transmission using secure socket layer (SSL) technology.
Access Controls: Access to personal data is limited to employees, contractors, and third-party service providers who need it to perform their duties.
Data Breach Procedures: In the event of a data breach, we will notify affected users and the appropriate authorities as required by law.

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request corrections to any inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing: You can request that we limit the processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another controller.
Right to Object: You have the right to object to the processing of your personal data, particularly for marketing purposes.
Right to Withdraw Consent: If you have provided consent for any specific processing, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected].

10. Cookies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience. You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

11. Third-Party Links

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before sharing any personal data.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and we will notify you of significant changes via email or through the Website.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

Address: Syokimau, Ellan Park Access Road, Nairobi, Kenya

Business Name: Suitcase Savvy

Email: [email protected]