๐Ÿ“ Ngong Town, Kajiado County, Kenya ๐Ÿ“ž +254107430646  |  โœ‰๏ธ info@bookmapstationer.store ๐Ÿ•’ Monโ€“Sat: 7:30 AM โ€“ 6:00 PM

Privacy Policy

Effective date: 1 January 2026

Bookmap Stationery ("we", "our", "us") is committed to protecting your personal information. This policy explains what data we collect when you visit bookmapstationery.store or place an order with us, how we use it, and your rights under the Kenya Data Protection Act, 2019.

We will never sell your personal data to third parties. Your information is used solely to fulfil your orders and improve our service.

1. Who We Are

Bookmap Stationery is a wholesale stationery retailer based in Ngong Town, Kajiado County, Kenya. For data-related enquiries you can reach us at:

2. Information We Collect

We collect the following categories of personal data:

  • Identity data: full name provided when placing an order.
  • Contact data: phone number and email address used for order communication.
  • Transaction data: details of the products you purchase and payment method (M-PESA, card, or cash).
  • Usage data: anonymised information about how you navigate our website, collected via browser technologies (no third-party tracking cookies are used).

We do not collect sensitive personal data such as national ID numbers, biometric data, or financial account details beyond what is necessary to process a payment.

3. How We Use Your Information

We use your personal data for the following purposes:

  • To process and fulfil your orders and send order confirmations.
  • To communicate with you about your order status, delivery, or any issues.
  • To respond to enquiries, complaints, or return requests.
  • To send occasional updates about promotions or new products โ€” only if you have opted in, and you can unsubscribe at any time.
  • To comply with legal and regulatory obligations under Kenyan law.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal bases as defined under the Kenya Data Protection Act, 2019:

  • Contractual necessity: processing required to fulfil an order you have placed with us.
  • Legitimate interests: improving our website and communicating about your order.
  • Consent: for any optional marketing communications.
  • Legal obligation: where required by Kenyan law or a regulatory authority.

5. How We Share Your Information

We do not sell or rent your personal data. We may share your data only in the following limited circumstances:

  • Payment processors: Safaricom M-PESA and card payment gateways receive only the data necessary to process your transaction. Their own privacy policies govern how they handle this data.
  • Delivery partners: if we arrange delivery to you, the delivery provider receives your name, phone number, and delivery address.
  • Legal authorities: where required by law, court order, or to protect our legal rights.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined above and to comply with our legal obligations. Order records are typically retained for 7 years for tax and accounting purposes. After this period, data is securely deleted or anonymised.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include access controls, secure communication protocols on our website (HTTPS), and limiting access to personal data to staff who need it to do their jobs.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

8. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request that inaccurate or incomplete data be corrected.
  • Deletion: request that your data be deleted where it is no longer needed.
  • Objection: object to processing of your data for direct marketing at any time.
  • Portability: request your data in a portable, machine-readable format.
  • Lodge a complaint: file a complaint with the Office of the Data Protection Commissioner of Kenya if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within 30 days.

9. Cookies

Our website uses only essential browser storage (such as session data) required to make the website function โ€” for example, keeping your shopping cart between pages. We do not use advertising cookies or third-party analytics trackers.

10. Third-Party Links

Our website may link to external websites (for example, payment portals). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated accordingly. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: