Privacy Policy - Capex Countertops

Effective Date: April 2026

Last Updated: April 2026

1. Introduction

Capex Countertops (“we”, “us”, “our”) is committed to protecting the privacy and personal data of every individual who interacts with our business, whether through our website, showroom, or any other channel. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with the Kenya Data Protection Act, 2019, and its accompanying regulations.

By using our website or engaging with our services, you agree to the terms outlined in this policy.

2. Who We Are

Business Name: Capex Countertops

Physical Address: ASK Jamhuri Showground, Off Ngong Road, Nairobi, Kenya

Website: capexcountertops.co.ke

Email: info@capexcountertops.co.ke Phone: +254 740 555 009

Nature of Business: Supply and installation of premium stone countertops across Kenya

3. What Personal Data We Collect

We collect personal data that you provide directly to us or that is generated through your interaction with our website and services. This includes:

Personal Identification Information

Full name
Email address
Phone number
Physical or delivery address

Project and Order Information

Details of your countertop project or enquiry
Preferred products, sizes and finishes
Courier preferences for upcountry deliveries

Technical Data

IP address
Browser type and version
Pages visited on our website
Time and date of visits
Referring website or source

Communication Data

Messages, enquiries or feedback submitted through our contact forms, email, or social media

4. How We Collect Your Personal Data

We collect your data through the following means:

When you fill out a contact or enquiry form on our website
When you visit our showroom and provide your details
When you place an order or request a consultation
When you communicate with us via email, phone, or social media
Automatically through cookies and tracking technologies when you browse our website

5. Legal Basis for Processing Your Data

Under the Kenya Data Protection Act, 2019, we process your personal data on the following lawful grounds:

Consent – where you have clearly agreed to the processing of your data for a specific purpose
Contractual necessity – where processing is required to fulfil an order or service agreement with you
Legal obligation – where we are required by law to process your data
Legitimate interests – where processing is necessary for our business operations and does not override your rights and freedoms

6. How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to your enquiries and provide free consultations
To process and fulfill your orders and fabrication requests
To coordinate delivery and installation logistics
To send you updates or information related to your order
To improve our website, products and services
To comply with legal and regulatory obligations
To send marketing communications where you have given consent to receive them

We do not use your personal data for automated decision-making or profiling.

7. Data Sharing and Disclosure

We do not sell, rent or trade your personal data to third parties. We may share your data only in the following circumstances:

Service providers – courier companies or installation contractors engaged to fulfil your order, who are bound by confidentiality obligations
Legal compliance – where we are required to disclose information by law, court order or government authority
Business transfers – in the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections

All third parties with whom we share data are required to handle it in accordance with applicable data protection laws.

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements. In general:

Order and transaction records are retained for a minimum of 7 years in line with Kenyan tax and business regulations
Inquiry and consultation records are retained for 2 years from the date of last contact
Marketing data is retained until you withdraw your consent

When data is no longer required, it is securely deleted or anonymised.

9. Your Rights Under the Kenya Data Protection Act, 2019

As a data subject, you have the following rights:

Right of access – you may request a copy of the personal data we hold about you
Right to rectification – you may request correction of inaccurate or incomplete data
Right to erasure – you may request deletion of your personal data where there is no legitimate reason for us to continue processing it
Right to restriction – you may request that we limit the way we use your data
Right to data portability – you may request that your data be transferred to you or a third party in a structured, commonly used format
Right to object – you may object to the processing of your data where we rely on legitimate interests as the legal basis
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at the details provided in Section 13 of this policy. We will respond to your request within 21 days as required by the Kenya Data Protection Act, 2019.

10. Cookies and Tracking Technologies

Our website uses cookies to improve your browsing experience and analyze site traffic. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

Essential cookies – necessary for the website to function correctly
Analytical cookies – help us understand how visitors interact with our website
Marketing cookies – used to deliver relevant content and track the effectiveness of our communications

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

11. Data Security

We take the security of your personal data seriously. We have put in place appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or disclosure. These include:

Secure socket layer (SSL) encryption on our website
Restricted access to personal data within our organization
Regular review of our data handling and security practices

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any breach in line with legal requirements.

12. Third Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to Capex Countertops and third-party sites; we are not responsible for the privacy practices of any external sites. We encourage you to review the privacy policies of any third party websites you visit.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how we handle your personal data, please get in touch with us directly:

Capex Countertops ASK Jamhuri Showground, Off Ngong Road, Nairobi, Kenya Email: info@capexcountertops.co.ke Phone: +254 740 555 009 Website: capexcountertops.co.ke

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a revised effective date. We’d like to encourage you to review this policy periodically.

This Privacy Policy was prepared in compliance with the Kenya Data Protection Act, 2019, and the Data Protection (General) Regulations, 2021.