Privacy Policy

1. Overview and Data Controller

Beauty Republic Stores is committed to safeguarding the privacy and security of every customer and website visitor. This Privacy Policy details our operational policies regarding the collection, processing, storage, disclosure, and protection of your personal information when you browse our catalog, purchase salon, spa, or barbershop equipment, or interact with our customer care representatives.

By accessing our website, purchasing products, or communicating with us via phone, email, or our verified WhatsApp sales desk, you acknowledge and accept the data handling practices described in this policy.

2. Applicable Law and Regulatory Compliance

We operate within the Republic of Kenya and strictly comply with the provisions of the Kenya Data Protection Act, 2019, along with directives, statutory instruments, and guidance issued by the Office of the Data Protection Commissioner (ODPC). We adhere to core international data protection principles including lawfulness, transparency, purpose limitation, data minimization, accuracy, and storage limitation.

3. Information We Collect

To fulfill orders, coordinate heavy equipment logistics, process warranty records, and provide real-time sales support, we collect the following categories of personal information:

• Contact Information: Full customer name, primary phone number, email address, physical salon/spa or residential delivery address, and Kenyan county or city.
• Order & Product Selection Data: Specific equipment items, salon furniture configurations, models, quantities, custom color preferences, and order timestamps.
• Payment & Transaction Details: Lipa na M-Pesa transaction reference confirmation codes, payment timestamps, and total amounts paid. Please note: We never request, collect, or store your secret M-Pesa PIN, bank verification codes, or credit card security credentials.
• Communication Records: WhatsApp chats, telephone order inquiries, customer service records, and warranty inquiries submitted through our website forms or direct channels.
• Technical & Log Data: Internet Protocol (IP) address, browser client headers, device type, operating system, pages viewed, time spent on catalog listings, and referring URLs.

4. How We Use Your Information

Your personal data is processed exclusively for legitimate commercial and fulfillment purposes, including:

• Processing equipment orders, preparing items for dispatch, and executing warranty registrations.
• Coordinating same-day doorstep deliveries in Nairobi and countrywide courier freight across all 47 Kenyan counties.
• Transmitting order confirmation summaries, automated delivery alerts, and order follow-up feedback requests.
• Reconciling and verifying Lipa na M-Pesa payment records to prevent fraud and financial discrepancies.
• Providing technical guidance, salon setup advice, and maintenance support via our WhatsApp sales desk.
• Complying with statutory bookkeeping, tax filing, and accounting requirements under Kenyan law.

5. Legal Grounds for Processing

Pursuant to Section 30 of the Kenya Data Protection Act, 2019, we process your personal data under the following recognized legal bases:

• Performance of a Contract: Processing is essential to fulfill your equipment purchase, arrange delivery logistics, and honor product warranties.
• Legitimate Business Interests: Maintaining transaction integrity, preventing fraudulent transactions, and optimizing store reliability.
• Consent: When you voluntarily submit your contact details for quotation inquiries or order status communications.
• Legal Compliance: Maintaining audited commercial records for statutory tax and regulatory bodies.

6. Sharing of Personal Data

We do not sell, rent, monetize, or trade your personal data with third parties for independent commercial marketing. We share necessary data only with trusted partners strictly required to complete our services:

• Couriers & Logistics Partners: Recipient name, phone number, and physical delivery address are provided to verified delivery riders and regional parcel couriers exclusively for transit and delivery execution.
• Payment Providers: Safaricom M-Pesa (Daraja API) to verify payment verification codes and reconcile order accounts.
• Hosting & Cloud Infrastructure: Highly secure VPS servers and transactional email infrastructure operating under strict confidentiality and encryption standards.
• Statutory & Law Enforcement Bodies: Only when strictly mandated by Kenyan law, court summons, or official regulatory directives.

7. Cookies, Pixels, and Analytics

Our website uses cookies and standard web analytics to ensure proper browsing performance and order session management:

• Essential Session Cookies: Required to preserve your active shopping bag items and secure checkout state across browsing sessions.
• Analytics & Performance Pixels: We utilize privacy-compliant analytics (including Google Analytics, Meta Pixel, and TikTok Pixel) to evaluate catalog navigation and optimize user experience. These tools collect pseudonymized aggregate data.

You can modify or disable cookies through your browser settings at any time.

8. Data Retention and Security Safeguards

We implement comprehensive technical, physical, and organizational security measures to protect your personal information against unauthorized access, loss, or misuse. All communications across our website are secured using industry-standard Transport Layer Security (TLS/SSL) encryption.

We retain personal data only for the period necessary to fulfill purchase agreements, address warranty claims, resolve disputes, and comply with Kenya Revenue Authority (KRA) accounting regulations.

9. Your Statutory Rights

Under the Kenya Data Protection Act, 2019, you hold enforceable rights regarding your personal data:

• Right to be Informed: To know what personal data is collected, how it is used, and who it is shared with.
• Right of Access: To request a copy of the personal information we hold concerning your account.
• Right to Rectification: To request the prompt correction of inaccurate, outdated, or incomplete data.
• Right to Erasure: To request the deletion of your personal data, subject to statutory record-keeping obligations.
• Right to Object: To opt out of automated notifications or marketing communications.
• Right to Lodge a Complaint: To submit a complaint to the Office of the Data Protection Commissioner (ODPC) of Kenya if you believe your privacy rights have been violated.

10. Age Limitations

Our website and commercial services are intended for adults of legal age (18 years and above). We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data to our system, please contact us immediately for deletion.

11. Policy Modifications

We may periodically update this Privacy Policy to reflect operational enhancements or updates in statutory legislation. Changes become effective immediately upon posting on this page with an updated revision date.

12. Contact Information and Data Protection Inquiries

For any questions, data access requests, or privacy inquiries, please contact our data support team directly: