Privacy Policy

1. Who We Are

Lorenzo Finest (‘we’, ‘us’, ‘our’) is an e-commerce retailer operating at lorenzofinest.co.ke, offering dust bins, kitchenware, signage, storage solutions, and everyday home and office essentials to customers across Kenya. Our physical operations are based in Nairobi, Kenya.

Business Name	Lorenzo Finest
Website	https://www.lorenzofinest.co.ke
Email	info@lorenzofinest.co.ke
Phone	+254 796 860533
Location	Nairobi, Kenya

2. Information We Collect

2.1 Information You Provide

• Full name, email address, phone number, and delivery address when placing an order
• M-Pesa phone number when paying via M-Pesa STK Push
• Account credentials if you register an account
• Reviews and feedback you submit on products
• Enquiries sent via WhatsApp, email, or contact forms

2.2 Automatically Collected Information

• IP address, browser type, device type, and operating system
• Pages visited, time spent, and clickstream data via Google Analytics
• Cookies and similar tracking technologies (see Section 7)
• Referral sources (how you arrived at our website)

2.3 Payment Information

We do not store full card numbers or M-Pesa PINs. Payment transactions are processed through PCI-DSS compliant payment gateways. We only retain transaction reference numbers and status.

3. How We Use Your Information

We use your personal data for the following purposes:

• Processing and fulfilling your orders, including delivery coordination
• Sending order confirmations, shipping updates, and delivery notifications
• Responding to customer enquiries and support requests
• Preventing fraud and maintaining the security of our platform
• Personalising your shopping experience and product recommendations
• Sending promotional emails and offers (only with your consent)
• Improving our website, products, and services through analytics
• Complying with legal and regulatory obligations under Kenyan law
• Processing Google Shopping and advertising campaigns

4. Legal Basis for Processing

Under Kenya’s Data Protection Act, 2019, we process your personal data on the following lawful bases:

• Contract: to fulfil orders you place with us
• Legitimate Interest: for fraud prevention, analytics, and website improvement
• Consent: for marketing communications and non-essential cookies
• Legal Obligation: to comply with tax laws, consumer protection regulations, and other applicable Kenyan legislation

5. How We Share Your Information

5.1 Service Providers

We share data with trusted third-party processors who help us operate our business:

• Delivery partners for order fulfilment across Kenya
• Payment processors (M-Pesa/Safaricom, Visa/Mastercard acquiring banks)
• Google LLC for Google Shopping, Google Ads, and Google Analytics
• Meta Platforms for Facebook and Instagram advertising
• Email service providers for transactional and marketing emails

5.2 We Never Sell Your Data

Lorenzo Finest does not sell, rent, or trade your personal information to third parties for their own marketing purposes.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Order records: 7 years (as required under the Kenya Tax Procedures Act)
• Account data: for the life of the account plus 2 years after closure
• Marketing data: until you withdraw consent or unsubscribe
• Analytics data: 26 months (Google Analytics default)

7. Cookies

We use cookies to enhance your browsing experience. Types of cookies we use:

• Essential Cookies: required for the website and cart to function
• Analytics Cookies: Google Analytics to understand how visitors use our site
• Marketing Cookies: Google Ads and Meta Pixel to show relevant advertisements
• Preference Cookies: to remember your settings and wishlist

You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to shop with us.

8. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data (‘right to be forgotten’)
• Object to processing of your personal data for marketing
• Withdraw consent at any time without affecting prior processing
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya

To exercise any of these rights, email us at info@lorenzofinest.co.ke. We will respond within 21 days.

9. Data Security

We implement industry-standard security measures to protect your data, including 256-bit SSL/TLS encryption on all pages, secure payment gateways with PCI-DSS compliance, and access controls limiting staff access to personal data. While we take all reasonable precautions, no system is 100% secure; we encourage you to use strong passwords and notify us immediately of any suspected unauthorised access.

10. Children’s Privacy

Our website is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email to registered customers. The updated policy will be effective from the date of publication.

12. Contact Us

For all privacy-related queries or to exercise your rights, contact our Data Protection Officer:

Email	info@lorenzofinest.co.ke
Phone	+254 796 860533
WhatsApp	+254 796 860533
Address	Nairobi, Kenya