Privacy policy

Last updated: September 2026

Who we are

Shatach Investments, a business registered in Kenya (registration no. BN-6GC86AD), sells computers and accessories online to customers in Kenya. We are the data controller for the personal data described here. Questions or requests about your data: our email.

This policy explains what personal data we collect, why, on what legal basis, how long we keep it, and your rights under the Kenya Data Protection Act, 2019.

What we collect

• Order details: your name, phone number, email (optional), delivery town, address or courier branch, and the items you buy.
• Delivery location: if you drop a pin on the map or tap "Use my current location" at checkout, the pin's coordinates. Your browser asks your permission before sharing your location.
• Payment details: the phone number or card used and the payment reference. Card numbers are entered on our payment provider's secure page and never reach us.
• Call-back and quote requests: your name, phone, email, company and the items or message you send us.
• Reviews: the rating and text you write, shown publicly with your first name and last initial.
• How you found us: the advert or link that brought you to the store (for example "facebook" or a campaign name), kept in your browser for 30 days and saved with your order or request.
• Browsing data: pages viewed and actions such as adding to cart, collected through cookies only if you accept them.

Why we use it, and our legal basis

• To process, deliver and support your order, handle returns and warranty claims, and let you track it: performance of our contract with you.
• To keep accounting and tax records (including KRA eTIMS invoices): legal obligation.
• To answer your call-back or quote request: your request (steps before a contract).
• To see which adverts bring customers, and to prevent fraud and abuse: legitimate interests.
• To measure and personalise advertising with cookies: your consent, which you can withdraw at any time.

We don't make decisions about you based solely on automated processing.

Cookies and advertising

If you choose Accept on our cookie banner, we use tools from Meta (Facebook & Instagram), TikTok and Google (Analytics and Ads) to understand how our store is used and to show you relevant ads. After an order, if you gave an email, Google Customer Reviews may also offer you a short survey about your purchase; Google receives your order number, email and expected delivery date to send it, and you can say no. These providers may process data about your visit under their own privacy policies. If you choose Decline, none of these tools are loaded. You can change your choice at any time from Cookie settings (also in the footer); withdrawing consent removes these tools' cookies from our site.

Who we share it with

• Payment providers (Safaricom M-PESA, Airtel Money and Pesapal for cards) to take payment.
• Delivery partners (our riders, G4S and Fargo Courier), to deliver your order.
• Map services, to turn a map pin into an address: OpenStreetMap, and Google Maps when it is available.
• The advertising providers above, only if you accepted cookies.
• Authorities such as KRA, where the law requires it.

We do not sell your personal data.

Transfers outside Kenya

Some of these providers (Meta, TikTok, Google, OpenStreetMap) and our website's hosting may store or process data on servers outside Kenya. We only use providers that commit to protecting personal data, as required by section 48 of the Data Protection Act.

How long we keep it

• Orders, payments and invoices: 5 years from the end of the year of the sale, as Kenya's tax laws require.
• Call-back and quote requests: up to 2 years, unless they lead to an order.
• Reviews: while the product is listed, or until you ask us to remove yours.
• Cookie data: for as long as each provider's own settings keep it; you can clear it from your browser at any time.

How we protect it

The store runs over an encrypted (HTTPS) connection, admin access is password-protected, and only the staff who handle your order can see it.

Your rights

Under the Data Protection Act you can ask us to: tell you what data we hold about you and give you a copy; correct it; delete it; restrict or object to its use (including for marketing); and receive it in a portable format. You can also withdraw consent to cookies at any time. Contact us at our email and we'll respond within 7 days.

If you're not happy with how we handled your data, you can complain to the Office of the Data Protection Commissioner (ODPC), Kenya.