Legal
Privacy Policy
Last updated: January 1, 2025
Acotoner ("we", "us", or "our") is committed to protecting your personal information. This policy explains what data we collect, why we collect it, and how we keep it safe. By using our website or services, you agree to the practices described here.
1. Information We Collect
Information you provide directly
- Name, email address, and phone number when you contact us or place an order
- Company name and delivery address for business orders
- Messages and enquiries submitted through our contact form or WhatsApp
Information collected automatically
- IP address, browser type, and device information
- Pages visited, time spent on site, and referring URLs
- Cookies and similar tracking technologies (see Cookies section)
2. How We Use Your Information
- To process and fulfil your orders and arrange delivery
- To respond to enquiries, quotes, and support requests
- To send order confirmations and delivery updates
- To improve our website, products, and customer service
- To comply with legal and regulatory obligations
- To send occasional promotional messages — only with your consent
5. Data Security
We take security seriously and implement appropriate technical and organisational measures to protect your data, including:
- HTTPS encryption on all pages
- Secure, access-controlled servers
- Regular security reviews and updates
- Limited staff access to personal data on a need-to-know basis
No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Rights
Under applicable Kenyan data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data (subject to legal retention obligations)
- Object to or restrict certain types of processing
- Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at [email protected] and we will respond within 30 days.
7. Data Retention
We retain personal data only as long as necessary:
- Order and transaction data: 7 years (as required by Kenyan tax law)
- Contact form submissions: 2 years after last communication
- Analytics data: 26 months (aggregated and anonymised)
- Cookies: See individual cookie expiry times in your browser
8. Children's Privacy
Our website and services are intended for business and adult use. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has submitted data to us, please contact us immediately and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: