Privacy Policy – Orewa Limited

Orewa Limited (“Orewa”, “we”, “us” or “our”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy (“Policy”). This Policy describes the types of information we may collect from you, or that you may provide, on the Orewa website at orewa.co.ke (the “Website”) and any of its related products and services (collectively, the “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that information. It also explains the choices available to you regarding our use of your personal information and how you can access and update it.

This Policy is a legally binding agreement between you (“User”, “you” or “your”) and Orewa Limited. If you are entering into this agreement on behalf of a business or other legal entity, you represent that you have the authority to bind that entity to this agreement. If you do not agree with the terms of this Policy, you must not access or use the Website and Services. By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by this Policy.

This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Automatic Collection of Information

When you visit the Website, our servers may automatically record information that your browser sends. This may include your IP address, browser type and version, operating system, language preferences, referring pages, pages visited, time spent on pages, search queries, access times, and dates. This information is used to identify potential cases of abuse and to compile statistical data regarding Website usage and traffic, and does not by itself identify individual users.

Collection of Personal Information

You can access and browse the Website without revealing your identity. However, to use certain features — such as placing an order or creating an account — you may be asked to provide personal information. We may collect the following categories of personal information:

Account details (username, user ID, password)
Contact information (name, email address, phone number)
Basic personal details (name, county or country of residence)
Delivery information (physical or delivery address)
Payment information (billing details and transaction data)
Device and location data (IP address, approximate location)

Some personal information may also be obtained from public sources, social media platforms, or marketing partners, in accordance with applicable laws. You may choose not to provide personal information, but this may limit your ability to access certain Services.

How We Collect Your Information

We collect information directly from you when you create an account, place an order, contact us, or subscribe to our communications; automatically through cookies, pixels, and analytics tools when you use the Website; and, in limited cases, from third-party sources such as payment processors and marketing partners.

Privacy of Children

Orewa Limited does not knowingly collect personal information from children under the age of 18. If you believe a child has provided personal information to us, please contact us so we can promptly remove it from our records.

Use and Processing of Personal Information

Depending on the circumstances, Orewa Limited may act as a data controller or a data processor in accordance with applicable data protection laws. We may collect and use personal information to:

Create and manage user accounts
Process and fulfil orders
Deliver products and services
Improve our products, services, and Website
Communicate administrative and promotional information
Respond to inquiries and provide customer support
Request feedback and reviews
Run promotions, competitions, and marketing campaigns
Enforce our terms, policies, and legal obligations
Prevent fraud, abuse, and security threats

Processing is carried out on the basis of your consent, contractual necessity, our legal obligations, our legitimate interests, or other lawful bases permitted by applicable law. Your personal information may be processed outside Kenya, including in jurisdictions with different data protection laws. Where this occurs, we implement appropriate safeguards to ensure your data remains protected.

Legal Compliance and Your Data Protection Rights

Orewa Limited is based in Kenya, and our handling of personal information is governed by the Kenya Data Protection Act, 2019 and the regulations made under it. This is the primary law that applies to our processing of your personal information.

We recognise that some visitors may access our Website from other regions. Where those visitors are protected by other data protection frameworks, we aim to align our practices with internationally recognised privacy principles — including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) — to the extent those frameworks apply. Referencing these frameworks does not mean Orewa Limited is established in, or directly regulated by the authorities of, those regions.

Subject to applicable law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information (“right to be forgotten”)
Object to or restrict certain processing of your information
Withdraw consent where processing is based on consent
Request a copy of your information in a portable format (data portability)
Where the CCPA applies to you as a California resident: to know what personal information is collected, to request its deletion, and to opt out of any “sale” of personal information (note: Orewa Limited does not sell personal information)

To exercise any of these rights, contact us using the details at the end of this Policy. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya, or your local data protection authority.

Payment Processing

For paid Services, we use trusted third-party payment processors to securely handle transactions. Payment information is encrypted and processed in compliance with PCI-DSS security standards. Orewa Limited does not store full payment card details on its servers. Payment processors may collect and process personal information in accordance with their own privacy policies.

Disclosure of Information

We may share your personal information with trusted service providers who assist us in operating the Website and delivering Services, including:

Payment processors
Order fulfilment and delivery partners
Marketing and analytics providers
Website hosting and IT service providers

We do not sell or rent your personal information to third parties. Information may be disclosed where required by law or to protect our legal rights. In the event of a business merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

Cookies

We use cookies and similar technologies to enhance your browsing experience, personalise content, remember your preferences, and analyse Website traffic. You can control cookie preferences through your browser settings, but disabling cookies may affect Website functionality.

Data Analytics

We may use third-party analytics tools, such as Google Analytics, to collect usage data that helps us improve Website performance and user experience. These tools generally process data in aggregated or anonymised form and do not identify individual users.

Advertising and Personalised Ads

Orewa Limited may partner with third-party advertising services, including Google (for example, Google Ads and Google’s advertising and remarketing services), to show you relevant advertisements on our Website and on other websites and platforms. These services may use cookies, device identifiers, and similar technologies to collect information about your activity over time and across websites in order to deliver personalised advertising and measure its effectiveness.

You can control or opt out of personalised advertising at any time:

Manage Google’s use of your data for ads through Google Ads Settings (myadcenter.google.com)
Opt out of personalised advertising from participating companies through youronlinechoices.com or optout.aboutads.info
Adjust ad and tracking preferences in your browser and device settings

Our Website may also include social media features that are governed by the privacy policies of their respective platforms.

Email Marketing and Notifications

You may subscribe to our newsletters and marketing communications. You can opt out at any time using the unsubscribe link provided in our emails. Transactional communications relating to your orders and account will still be sent where necessary.

Managing and Deleting Your Information

You may request access to, correction of, or deletion of personal information we hold about you by contacting us using the details below. We may retain certain information where required by law or for legitimate business purposes such as completing transactions, resolving disputes, and enforcing our agreements.

Retention of Information

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

Information Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Data Breach

In the event of a data breach that poses a risk to your rights or freedoms, we will take appropriate steps to investigate and mitigate the breach and will notify affected users and the relevant authorities in accordance with applicable laws, including the Kenya Data Protection Act, 2019.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Website after changes are posted constitutes acceptance of the revised Policy.

Acceptance of This Policy

By using the Website and Services, you acknowledge that you have read and agree to this Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information — including requests to access, correct, or delete your data — please contact:

Orewa Limited Email: support@orewa.co.ke Phone: +254 118 926934 Address: M45, 1st Floor, Woodvale Centre, Woodvale Groove, Westlands, Nairobi, Kenya