Privacy policy

Who we are

ArduinoTech Kenya sells electronic components and provides 3D printing services from Travis Business Center, 3rd Floor Room A3, Mfangano Street, Nairobi CBD (same building as Quickmart Mfangano, behind Afya Center). For anything in this policy you can reach us on +254 724 011 572 or through the contact page. We are the data controller for the information described below.

What we collect, and why

When you place an order: your name, phone number, email address and delivery address. We need these to take payment, pack the right items and get them to you. Without them we cannot fulfil an order.

When you create an account: your email address. We sign you in by emailing a one-time code rather than storing a password, so there is no password of yours for us to lose.

When you send a design for 3D printing: your name, phone number, optionally your email, and the design file itself. We use the file to quote and print your job. We do not share your design with anyone else, and we do not print it for anyone but you.

When you ask to be told an item is back in stock: your email address, used once for that notification.

When you simply browse: our host records standard server logs, and we keep a count of pages that could not be found so we can fix broken links.

What we do not do

We do not run Google Analytics, advertising pixels or any third-party tracking on this site. We do not sell, rent or trade your personal data. We do not send marketing email unless you have asked for it, and we do not build advertising profiles of visitors.

Cookies

We use two cookies, both strictly necessary and neither used for advertising. One keeps you signed in to your customer account, the other keeps staff signed in to the back office. Your shopping cart is held in your own browser's storage and is never sent to us until you check out.

Who else handles your data

We keep the list short on purpose. The services below process data on our behalf:

• Vercel — hosts the website and stores files you upload for printing.
• Turso — stores our database, including orders and accounts.
• Resend — sends order confirmations and sign-in codes by email.
• Safaricom M-Pesa — processes payments. We see the reference and amount; we never see or store your PIN.

Where your data is held: our database and file storage sit on servers in Ireland and the European Union rather than in Kenya. This means your personal data is transferred outside Kenya. We rely on those providers' standard contractual protections, and the data is held to the same standards described in this policy wherever it sits.

How long we keep it

Order records are kept for seven years, because tax and accounting rules require it. Design files sent for quoting are kept while we are quoting or printing, and deleted on request once the job is done. Sign-in codes expire within minutes. Stock notification emails are removed once the notification has been sent.

Your rights

Under the Data Protection Act 2019 you can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct anything that is wrong;
• delete your data, where we are not required to keep it for tax reasons;
• stop using it for a particular purpose.

Ask on +254 724 011 572 or through the contact page and we will respond within 30 days. If you are not satisfied with how we handle it, you can complain to the Office of the Data Protection Commissioner in Kenya.

Changes

If this policy changes we will update the date at the top of this page. Material changes affecting how we use data you have already given us will be told to you directly.