Below is a Kenya-compliant Privacy Policy tailored for solarbridge.africa, aligned with the Data Protection Act, 2019 and ODPC guidance.

Introduction

This Privacy Policy explains how SolarBridge Africa collects, uses, discloses, and protects personal data when individuals visit or purchase from solarbridge.africa within Kenya, in line with the Data Protection Act, 2019 and guidance from the Office of the Data Protection Commissioner (ODPC).odpc+2​

Data Controller

SolarBridge Africa is the data controller for personal data processed through solarbridge.africa and is responsible for implementing appropriate technical and organizational measures for compliance with Kenyan law and ODPC guidance.kentrade+2​

Legal Basis and Principles

Personal data is processed lawfully, fairly, and transparently for specified, explicit, and legitimate purposes, observing data minimization, accuracy, storage limitation, integrity, and confidentiality as required by the Data Protection Act, 2019 and ODPC resources.odpc+2​

Data Collected

  • Identity and Contact: name, email, phone, billing and delivery addresses, and account details collected for account creation, ordering, delivery, and support.odpc+1​

  • Transaction and Payments: order details, payment references from payment processors, and invoice information necessary for purchase fulfillment and anti-fraud controls.kentrade+1​

  • Technical and Usage: IP address, device identifiers, browser type, pages visited, and timestamps for security, analytics, and service improvement via cookies or similar technologies with consent where required.bigcommerce+1​

  • Communications: inquiries, support tickets, and installation scheduling details to provide customer service and after-sales support under lawful purpose and consent frameworks.odpc+1​

Purposes of Processing

  • Provide and fulfill orders, deliveries, installations, and warranties, including customer support and service notifications, under contractual necessity.kentrade+1​

  • Fraud prevention, network security, and service reliability as legitimate interests consistent with ODPC guidance and statutory obligations.odpc+1​

  • Marketing communications, analytics, and personalization with valid consent and an opt-out mechanism for direct marketing under Kenyan law.kentrade+1​

Lawful Bases

Processing relies on one or more lawful bases: performance of a contract, compliance with legal obligations, consent (including for marketing and cookies), and legitimate interests that do not override data subject rights per the Act and ODPC guidance.odpc+1​

Cookies and Similar Technologies

The site uses necessary cookies to operate the store and may use analytics/marketing cookies with prior, informed, granular consent; users can manage or withdraw consent at any time, and cookie use is disclosed in this policy and any cookie banner/notice per e-commerce best practices.cookiehub+1​

Data Sharing and Disclosures

  • Service Providers: logistics, installation partners, payment processors, IT and security vendors processing data under binding instructions and safeguards consistent with ODPC expectations.odpc+1​

  • Legal Compliance: disclosures required by law, regulation, or court order, including to competent authorities in Kenya where necessary and proportionate.kentrade+1​

  • Business Operations: accounting, audits, and corporate governance with confidentiality and minimal disclosure necessary to achieve the purpose.odpc+1​

International Transfers

If personal data is transferred outside Kenya, appropriate safeguards are applied consistent with the Act and ODPC practice, ensuring adequate protection and enforceable rights with clear information to data subjects where applicable.kentrade+1​

Data Retention

Data is retained only as long as necessary for the purposes collected, including tax, warranty, dispute resolution, and statutory records, then securely deleted or anonymized in line with storage limitation principles.masibolaw+1​

Data Security

Appropriate technical and organizational measures protect data against unauthorized access, alteration, disclosure, or loss, including access controls, encryption where appropriate, and vendor due diligence consistent with ODPC expectations.odpc+1​

Data Subject Rights

Individuals have rights under Kenyan law to be informed, access, rectification, erasure, portability, restriction, objection to processing (including direct marketing), and to not be subject to solely automated decisions, plus the right to complain to the ODPC.cookiehub+1​

Exercising Rights

Requests can be made through the contact section; identity verification may be required, and responses will be provided within statutory or reasonable timeframes, including explanations where requests cannot be fulfilled under the Act.odpc+1​

Marketing Preferences

Marketing emails or SMS are sent with prior consent and include a clear opt-out; opting out will not affect service communications necessary for orders, delivery, installation, or safety notices.kentrade+1​

Children’s Data

The site and services are intended for adults; personal data of minors is processed only in compliance with Kenyan law, with appropriate consent mechanisms and safeguards where applicable.odpc+1​

Registration and Compliance Notes

Where required by thresholds or sector criteria, the business will register with the ODPC as a data controller/processor and adhere to applicable guidance notes and enforcement frameworks in Kenya.dlapiperdataprotection+1​

Complaints and Redress

In addition to contacting SolarBridge Africa, data subjects may submit complaints to the Office of the Data Protection Commissioner if they believe their data protection ights have been infringed.odpc+1​