This policy explains how TAPL Office Furniture looks after your personal data. It covers this website, our showrooms and any order you place with us. It is written to follow the Data Protection Act 2019 of Kenya.
Who we are
TAPL Office Furniture sells, custom-makes, delivers and installs office furniture across Kenya and East Africa. Under the Data Protection Act 2019, we are the data controller for the personal data in this policy. That means we decide how it is used, and we are responsible for it.
You can reach us at info@taploffice.com, on +254 793 937 924 or +254 710 553 671, or at either showroom: T-Mall Area, Nairobi West, or The Mirage, Waiyaki Way, Westlands.
What we collect
We collect only what we need to quote for, deliver and support your order. That means:
| Information | Why we hold it | How long we keep it |
|---|---|---|
| Name and organisation | To know who we are quoting for and delivering to | Seven years, with order records |
| Phone number and email | To call you back, confirm delivery times and send order confirmations | Seven years, with order records |
| Delivery address and access notes | To plan and carry out delivery and installation | Seven years, with order records |
| Floor plans and photos you send us | To measure, plan a layout and build custom pieces | Two years after the order, unless you ask us to delete them sooner |
| Order and payment records | To complete the order and meet tax and accounting rules | Seven years, because Kenyan tax law requires it |
| Website usage data | To keep the site working and see which pages are useful | Up to twenty-six months |
We never collect or store your card or M-Pesa details. Our payment provider handles all payments on their own secure page.
We do not knowingly collect sensitive personal data, for example about your health, religion or ethnic background. Please do not send it to us.
Why we use it, and the legal reason
The Data Protection Act says we must have a legal reason for each way we use your data. Ours are:
- To carry out a contract. Quoting, taking payment, delivering, installing and supporting your order.
- Legitimate interests. This means our normal business needs. Keeping the site safe and working. Keeping records of what we sold you, so we can support you and supply matching parts years later.
- Legal obligation. Keeping invoices and tax records for as long as Kenyan law requires.
- Consent. Only when you have asked us to contact you about something specific, such as through the enquiry form. You can take back your consent at any time.
We do not sell your data. We do not share it with advertisers. We do not add you to a marketing list just because you bought something.
Cookies and analytics
The site uses a few cookies. Cookies are small files saved in your browser. Some are strictly necessary: they keep your cart and your visit working, and cannot be switched off. We also use Google Analytics. It sets cookies that tell us which pages people visit, how long they stay and how they found the site, so we can improve it. It does not tell us who you are. Google processes this information on its own systems, which are outside Kenya.
You can block or delete cookies in your browser settings. If you block the strictly necessary cookies, the cart and checkout will stop working.
Who we share it with
We share personal data only when we have to, so we can do what you asked for:
- Our payment provider, to take your payment securely. Your payment details go straight to them. We never see them.
- Freight partners, when an order goes outside Kenya. They get only the name, address and phone number needed to deliver it.
- Our hosting and IT providers, who keep the site and our systems running.
- Google, which provides our visitor statistics. See Cookies and analytics above.
- Professional advisers and authorities, where the law requires it.
Everyone we share data with may use it only for the reason we gave it to them.
When data leaves Kenya
Some of our suppliers and service providers are outside Kenya. Some of our furniture is imported. So we may share order details with manufacturers abroad. When personal data leaves Kenya, we take steps to protect it to the standard the Data Protection Act requires. This includes protections written into our contract with the company that receives it.
How we protect it
Only people who need personal data to do their job can see it. Our systems are password protected. Data going to and from this site is encrypted, which means it is scrambled so others cannot read it. Payment details never go through our systems at all.
No system is perfect. If there is a data breach that is likely to affect your rights, we will tell the Office of the Data Protection Commissioner. Where the law requires, we will tell you too. We will do this within the time limits the Act sets.
Your rights
Under the Data Protection Act 2019 you have the right to:
- be told how your data is being used, which is what this policy is for;
- ask for a copy of the personal data we hold about you;
- have wrong data corrected;
- ask us to delete data, unless the law says we must keep it;
- object to us using your data for our legitimate interests;
- ask us to limit how we use your data while a concern is sorted out;
- take back your consent at any time, where consent is the reason we relied on.
To use any of these rights, email info@taploffice.com or call +254 793 937 924 or +254 710 553 671. We reply within thirty days, and it is free.
Children
This site is for businesses and adults. We do not knowingly collect personal data from children. If you think a child has given us personal data, contact us and we will delete it.
Changes to this policy
We update this policy when the way we work changes, or when the law changes. The date at the top of the page shows when it was last changed. If we make a big change, we will say so clearly on this page. We will not do it quietly.
Contact us, or complain
If you have a question or a concern about how we handle your data, please come to us first. Email info@taploffice.com or call +254 793 937 924 or +254 710 553 671. You will reach a real person, not a queue.
If we cannot sort it out, you have the right to complain to the Office of the Data Protection Commissioner. This is the government office in charge of data protection in Kenya. Their website is odpc.go.ke.
We collect only what we need to quote for, deliver and support your order. We never see your payment details. We do not sell your data or add you to marketing lists. You can ask us at any time to show you, correct or delete what we hold.