Official Policy • Data Protection Act, 2019 (Kenya) Compliance
Privacy Policy
Essen respects your privacy and is committed to protecting the personal information you provide when using our website.
This Privacy Policy explains what information we collect, why we collect it, how we use it, how we protect it and the rights you may have in relation to your personal data. This Policy applies to Essen's website, online store, enquiry forms, quotation requests, customer accounts, marketing communications and other digital interactions operated by Essen, and should be read together with our Terms & Conditions.
This website is operated by Essen E-Com Limited. For the purposes of applicable Kenyan data-protection law, Essen acts as a data controller in relation to personal information collected through this website.
The Kenyan Data Protection Act, 2019 establishes legal obligations for data controllers and processors and provides individuals with enforceable statutory rights concerning their personal data.
02
Information We Collect
Depending on how you interact with our website, we may collect and process various categories of personal information:
Contact Information
Full Name and Title
Telephone and Mobile numbers
Email address
Physical or delivery address
Postal address and PO Box details
Company or organisation name
Order Information
Where you purchase products through the website, we collect: products ordered, quantities, order numbers, delivery details, billing information, transaction status, and related order correspondence.
Account Information
If you create a customer account on Essen, we collect: username, email address, password credentials, order history, and account preferences.
Password Security Guarantee
Passwords are stored using industry-standard cryptographic hashing security measures. Essen does not store passwords in plain text on any system.
Communication Information
When you contact us, we retain the information provided, including general enquiries, quotation requests, product support inquiries, complaints, and feedback.
Technical Information & Cookies
When visiting the website, technical information is collected automatically, including IP address, browser type, device type, operating system, pages visited, interaction logs, referring URLs, and approximate geographic location derived from network metadata.
We use cookies to maintain core functionality, remember user preferences, improve site experience, analyze traffic performance, and support marketing activities. You can manage or disable cookies via your web browser settings.
03
How We Use Your Information
Essen uses personal information for specified, explicit, and legitimate operational purposes, including:
Processing, confirming, and fulfilling product orders
Delivering products to specified delivery addresses
Responding to customer enquiries and quotation requests
Providing dedicated technical customer support
Managing customer accounts and user profiles
Processing payment transactions and reconciling orders
Communicating status updates concerning active orders
Handling product returns, complaints, and warranty claims
Improving our product catalog and manufacturing services
Enhancing website usability, navigation, and performance
Analyzing website traffic trends and user behavior
Preventing fraud, security breaches, and website misuse
Maintaining official business, financial, and tax records
Complying with statutory, regulatory, and legal obligations
Sending marketing updates where permitted or with appropriate consent
04
Legal Basis for Processing
We process personal information strictly where permitted under applicable law. Processing activities are grounded on one of the following lawful bases:
Consent: Where you have granted explicit permission for specific processing activities (such as newsletter subscriptions).
Performance of a Contract: Where processing is necessary to perform a contract with you or take requested steps prior to entering into a contract.
Compliance with Legal Obligations: Where processing is mandated by Kenyan statutory regulations, tax laws, or regulatory standards.
Legitimate Interests: Where necessary for legitimate business interests, provided such interests do not override your statutory privacy rights.
The Kenyan Data Protection Act mandates that personal data processing must adhere strictly to core data protection principles, granting data subjects legal rights and remedies against unlawful processing.
05
Marketing Communications
If you subscribe to Essen's marketing updates or purchase products from us, we may send you information regarding:
New manufacturing products & packaging additions
Promotions, discounts, and bulk purchase offers
Company announcements and industry developments
Exhibitions, events, and trade communications
You may unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link in any email or by contacting Essen directly. We will not use your personal details for unrelated marketing without an appropriate lawful basis.
06
Sharing Personal Information
Essen may share personal information with selected third-party service providers acting on our behalf to support operations and service delivery:
Payment service providers and financial clearing houses
Delivery, freight, and logistics courier partners
Website hosting, cloud infrastructure, and IT security providers
Professional legal advisers, accountants, and external auditors
Government regulators and law enforcement bodies where legally required
Where third parties process personal information on Essen's behalf, we enforce contractual, organizational, and technical safeguards to ensure data integrity and confidentiality.
07
Payment Information
Online transactions on the Essen website are processed through PCI-DSS compliant third-party payment gateways (e.g. M-PESA, bank card processors).
Essen receives transaction status notifications, reference IDs, and payment totals necessary for order reconciliation. Essen does not store complete payment card details or sensitive banking credentials on its own servers.
Customers are advised to review the specific privacy policies of payment providers used during checkout.
08
International Data Transfers
Certain third-party technology, cloud hosting, payment gateway, or web analytics services utilized by Essen may store or process data on servers located outside Kenya.
Where personal data is transferred internationally, Essen ensures compliance with the cross-border transfer requirements specified under the Data Protection Act, 2019, ensuring adequate safeguards and contractual protections remain in place.
09
Data Security
Essen maintains robust technical and organizational security measures to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure:
Role-based access control and strict authentication protocols
Encrypted SSL/TLS data transmission across website interactions
Secure cloud hosting with regular automated system backups
Continuous monitoring and perimeter firewall defense mechanisms
Employee confidentiality agreements and data protection training
While we take all reasonable precautions, no transmission method over the internet can be guaranteed as 100% secure.
10
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying contractual obligations, maintaining business tax records, resolving disputes, and adhering to statutory retention limits.
Once personal data is no longer required, Essen securely deletes, anonymizes, or disposes of the records in accordance with data protection standards.
11
Your Data Protection Rights
Under applicable Kenyan data protection legislation, you hold the following statutory rights regarding your personal information:
Right to Information: To be informed of how your data is collected and processed.
Right of Access: To request copies of personal data held about you by Essen.
Right to Rectification: To request correction of inaccurate, outdated, or incomplete data.
Right to Erasure / Deletion: To request deletion of your personal data under applicable legal circumstances.
Right to Object: To object to data processing based on legitimate interests or direct marketing.
Right to Restriction: To request temporary restriction of processing in contested scenarios.
Right to Withdraw Consent: To withdraw previously granted consent at any time.
These rights align with guidance from the Office of the Data Protection Commissioner (ODPC) in Kenya regarding transparent processing.
12
How to Exercise Your Rights
To exercise any of your data protection rights, please submit a written request to Essen's Privacy Contact Point:
Please provide sufficient identification details so we can verify your identity before releasing or modifying personal records.
13
Complaints
If you believe your personal data has been handled improperly or your statutory privacy rights infringed, we encourage you to contact Essen first so we can investigate and resolve your concerns promptly.
You also maintain the legal right to lodge a formal complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya, which acts as the statutory supervisory authority for data protection enforcement.
14
Children's Privacy
The Essen website and online store are primarily intended for legal adults and commercial business entities. We do not knowingly collect personal data from minors.
If you suspect that a child has inadvertently submitted personal information to our website, please notify us immediately so we can remove the data from our active systems.
15
Cookies and Analytics
Our website utilizes cookies and analytical tracking tools to evaluate visitor usage trends and optimize platform capabilities. Information collected includes pages viewed, duration on site, browser type, device details, and geographic region.
Where required by law, appropriate cookie consent banners are displayed to allow visitors to accept or customize non-essential tracking cookies.
16
Third-Party Links
Our website may contain hyperlinks leading to external websites, payment processing partners, social media channels, or logistics services. Essen is not responsible for the privacy practices, policies, or content of third-party platforms. Visitors are encouraged to review the privacy notices of external websites upon leaving Essen.
17
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our products, website features, operational practices, technology, or legal requirements.
Revisions will be published directly on this page accompanied by an updated "Last Updated" date at the top of the policy.
E-Commerce Checkout & Order Acceptance Notice
During e-commerce checkout, customers will be provided clear opportunity to review order details, correct entry errors, and expressly confirm acceptance of purchase terms prior to order conclusion, in accordance with Consumer Protection Act requirements for internet agreements.
Essen Customer & Data Support
If you have any questions, privacy inquiries, or require support, please reach out to us: