Privacy Policy
Last updated: 6 October 2026
Wando's Interior ("we", "us") is the data controller for personal data collected through https://wandosinterior.co.ke, by phone, WhatsApp, email and in our showroom. This policy explains what we collect, why, who we share it with, how long we keep it, and your rights under the Data Protection Act, 2019 and its regulations.
1. Who we are
Wando's Interior, Shop 101, Seedhouse 1st Flr, Nairobi CBD, Kenya.
Contact for privacy requests: info@wandosinterior.co.ke · +254 745 056 954.
2. What we collect
- Identity and contact: name, phone number, email address.
- Delivery and site details: delivery address, landmark, and, for measuring or installation, the location and details of the property and windows.
- Order information: items ordered, prices, payment method, delivery and installation history, support messages. Payment is by Cash on Delivery; we do not collect or store card details on this website. If you pay a deposit by M-Pesa or bank transfer we keep the transaction reference.
- Account data: email, name and an encrypted (hashed) password if you register.
- Messages: anything you send through the contact form, email or WhatsApp.
- Technical data: basic information such as IP address, browser type, device and pages visited, and cookies needed to run the site (see section 7).
3. Why we use your data
| Purpose | Basis |
|---|---|
| Process, deliver, install and support your order; take payment; handle returns and warranty claims | Performance of a contract |
| Keep accounting, tax and legal records; respond to lawful requests from authorities | Legal obligation |
| Keep the website secure, prevent fraud and misuse, improve our products and service | Legitimate interests |
| Send marketing messages or offers (if you opt in) — you can withdraw at any time | Consent |
We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.
4. Who we share it with
Only as needed, and only with:
- couriers, parcel and bus services and our installation team, to deliver and fit your order;
- our hosting, email and messaging providers (including WhatsApp) that help us run the site and communicate with you;
- our accountants, professional advisers and, where the law requires, courts, the Kenya Revenue Authority, the ODPC or law enforcement.
These parties may only use your data for the services they provide to us. Some providers may process data outside Kenya; where they do, we take steps to ensure appropriate safeguards as the Data Protection Act requires.
5. How long we keep it
We keep order and accounting records for as long as Kenyan tax and accounting law requires, account data until you ask us to delete the account (subject to legal record-keeping), contact-form and support messages for as long as needed to deal with your query and any follow-up, and marketing data until you unsubscribe. After that we delete or anonymise it.
6. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords and restricted access to our systems. No system is completely secure; if a breach likely to harm you occurs, we will notify you and the ODPC as the law requires.
7. Cookies
We use essential cookies to keep your cart, your login session and security tokens working. These are necessary for the site to function. If we add analytics or advertising cookies in future, we will update this policy and ask for your consent where required. You can block cookies in your browser, but the cart and checkout will not work without essential cookies.
8. Your rights
Under the Data Protection Act, 2019 you have the right to: be informed about how we use your data; access it; object to or restrict processing (including direct marketing); have inaccurate data corrected; have data deleted where we no longer need it; and receive a copy of data you gave us in a portable format. To exercise a right, email info@wandosinterior.co.ke. We may need to verify your identity and will respond within the time the law allows (generally 30 days).
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Office of the Data Protection Commissioner (https://www.odpc.go.ke).
9. Children
Our website and services are for adults. We do not knowingly collect personal data from children under 18 without a parent's or guardian's consent.
10. Third-party links
Our site may link to other websites (for example WhatsApp or social media). We are not responsible for their privacy practices; please read their policies.
11. Changes to this policy
We may update this policy; the latest version is always on this page with its "last updated" date. Material changes will be highlighted on the site.
See also: Terms & Conditions · Shipping Policy · Returns & Refunds.