1. Who is responsible for your data

Pixel ADS Company Limited, Mpaka Plaza, 2nd Floor, Room 206, Nairobi, Kenya, is the data controller for personal data collected on this website and by our team. Contact us at info@signshop.co.ke about anything in this policy.

2. What we collect

Account: your name, email address and phone number. Customer accounts have no password: you sign in with a one-time code we email you.
Orders: the products, sizes and options you choose, delivery county and address, and order notes.
Quote requests: your name, company, phone, email, county, sign dimensions and notes, and any files you send us.
Payments: the transaction reference, amount and payment method. Payments are processed by iPay Africa; we never receive your card number or M-Pesa PIN.
Security data: IP address and browser type when you sign in, used to protect accounts and prevent fraud.

3. Why we use it

to make, deliver and install your order, and to contact you about it;
to answer quote requests;
to send sign-in codes, receipts and order emails;
to keep accounts and payments secure;
to meet our tax and accounting obligations.

We use your data to perform our contract with you, to meet legal obligations, and for our legitimate interest in keeping the service secure. We do not sell your data, and we do not send marketing messages unless you ask for them.

4. Who we share it with

iPay Africa, to process payments.
Vercel and Neon, which host this website and its database.
Resend, which delivers our emails.
Our delivery and installation team, who receive only the details needed to reach you.
Government authorities, when the law requires it.

Our hosting and email providers store data on servers in the United States. They process it only on our instructions and apply security safeguards, as the Data Protection Act requires for transfers outside Kenya.

5. Cookies and browser storage

We use only the cookies needed to keep you signed in and to protect our forms. Your cart is saved in your own browser. We do not use advertising or analytics cookies.

6. How long we keep it

Account details: while your account is open. Ask us to close it at any time.
Order and payment records: at least five years, as Kenyan tax law requires.
Quote requests: for as long as needed to follow up, or until you ask us to delete them.
Sign-in security records: deleted after 90 days.

7. How we protect it

The website uses HTTPS encryption throughout. Sign-in codes work once, expire after 10 minutes and are stored only in a scrambled (hashed) form. Only authorised staff, signing in with a one-time code sent to their work email, can see order and customer details.

8. Your rights

Under the Data Protection Act, 2019 you have the right to:

be told how your data is used;
get a copy of the data we hold about you;
have inaccurate data corrected;
have your data deleted, except records we must keep by law;
object to how we use your data;
receive your data in a format you can take elsewhere.

To use any of these rights, email info@signshop.co.ke from the address on your account. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

9. Children

Our services are for people aged 18 and over. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy. Changes take effect when posted on this page, with the date at the top updated.

Privacy Policy