Your privacy is important to us. This privacy statement explains the personal data Devi Stationers & Computers Ltd (“Devi Stationers & Computers Ltd”) processes, how Devi Stationers & Computers Ltd processes it, and for what purposes. This statement should be read together with the Terms and Conditions of Use for other Devi Stationers & Computers Ltd products and services. Where there is a conflict, this statement will prevail. This statement applies to all customers, suppliers, agents, merchants, dealers and all visitors frequenting any of Devi Stationers & Computers Ltd premises.
2.1 “You” means:
i)customer- the person who subscribes to, uses or purchases any of our products and services or accesses our websites and includes any person who accesses any of the products and services you have subscribed to.
ii)Any agent, dealer and/or merchants who have signed an agreement with us and is recognized as a merchant or agent under any applicable laws or regulations.
iii) Any visitor that is a person (including contractors/subcontractors or any third parties) who gains access to any Devi Stationers & Computers Ltd premises.
iv)Any supplier who has been contracted by Devi Stationers & Computers Ltd and executed a Supplier contract.
2.2 “Devi Stationers & Computers Ltd”, “we” or “us”, “our” and “ours” means Devi Stationers & Computers Ltd
The word “includes” means that what follows is not necessarily exhaustive and therefore the examples given are not the only things/situations included in the meaning or explanation of that text.
3.0 Statement Details
3.1 Collection of Information
3.1.1 We collect your personal information with your knowledge and consent when you do any of the following (please note that this list is not exhaustive):
a) register for a specific product or service, including but not limited to SIM-card registration, PostPay subscriptions, eCommerce platforms, M-PESA and M-PESA-powered services;
b) buy, subscribe to or use a Devi Stationers & Computers Ltd product or service online, on the cloud, on a mobile or other devices, in a Devi Stationers & Computers Ltd Shop or other retail outlets;
c) subscribe to Devi Stationers & Computers Ltd or third-party premium rates services, Short Message Service (SMS), email or social media platforms;
d) ask Devi Stationers & Computers Ltd for more information about a product or service or contact Devi Stationers & Computers Ltd with a query or complaint;
e) respond to or participate in a survey, marketing promotion, prize competition or special offer;
f) visit, access or use Devi Stationers & Computers Ltd or third-party websites;
g) We may also collect your information from other organizations including credit-reference bureaus, fraud prevention agencies, and business directories;
h) We may collect your information when you interact with us as a supplier, agent, merchant or dealer as prescribed in this statement;
i) We also collect information when you visit any of our premises.
3.1.2 We do not onboard minors (any person under 18 years of age) except where you additionally register on their behalf as their parent and/ or legal guardian. If you allow a child to use our services, you should be aware that their personal information could be collected as described in this statement.
3.2 What Information is collected?
The information we collect and store about you includes but is not limited to the following:
3.2.1 Your identity and SIM-card registration information, including your name, photograph, address, location, phone number, identity document type and number, date of birth, email address, age, gender, and mobile number portability records.
3.2.2 Your credit or debit card information, information about your bank account numbers and SWIFT codes or other banking information.
3.2.3 Your transaction information when you use our MPESA service.
3.2.4 Your preferences for particular products and services, based on information provided by you or from your use of Devi Stationers & Computers Ltd’s (or third party) network, products, and services.
3.2.5 Name, family details, age, profiling information such as level of education, bank account status, income brackets, etc. collected as part of surveys conducted by Devi Stationers & Computers Ltd and their agents on behalf of Devi Stationers & Computers Ltd.
3.2.6 Your contacts with us, such as when you: call us or interact with us through social media, our chatbot Zuri, ‘snail mail’, email (we may record your conversations, social media or other interactions with us), register your biometric information such as your voice, fingerprints, etc, visit a Devi Stationers & Computers Ltd Shop or other retail outlets.
3.2.7 Your account information, such as your handset type/model, tariff, top-ups; subscriptions (including third party subscriptions), billing statements, cloud hosting registration details, e-commerce registration and usage, M-PESA and mobile money transactions.
3.2.8 Your call data records: phone numbers that you call or send messages to (or receive calls and messages from), a log of calls, messages or data sessions on the Devi Stationers & Computers Ltd network and your approximate location (save for customer service interactions as noted above we do not record or store the message or call contents).
3.2.9 We use Closed Circuit Television (CCTV) surveillance recordings. CCTV Devices are installed at strategic locations to provide a safe and secure environment in all Devi Stationers & Computers Ltd premises as a part of our commitment to community safety, security and crime prevention.
3.2.10 When you request us to reserve parking for you, we will collect and retain your data (name, telephone number, and vehicle registration details) when you request Devi Stationers & Computers Ltd to reserve parking space for you and where you use any of our parking facilities as a contractor. We use the data you provide to ensure effective visitor, contractor and car park management, Health, and Safety compliance (orderly entry and exit to and from the car parks and buildings) and inventory management.
3.2.11 We maintain a register of visitors in which we collect and keep your data such as names, company/institution details, telephone number, vehicle registration details, and National ID number. This information is collected for health, safety and security purposes.
3.2.12 When you use Devi Stationers & Computers Ltd WIFI for guests and visitors, we collect email IDs and will provide user names and passwords. We record the device address and also log traffic information in the form of sites visited, duration and date sent/received.
3.2.13 We may use your medical information to manage our services and products to you e.g. when you use our services designed for persons with disabilities such as our braille watch for the visually impaired.
3.2.14 Where you use our voice recognition platform (IVR) we may collect and process your voice biometrics.
3.2.15 We collect your personal information when you visit us for purposes of accident and incident reporting. Devi Stationers & Computers Ltd will collect personal data from the injured party or person suffering from ill health, such as Name, Address, Age, next of kin, details of the incident to include any relevant medical history. The data is collected as Devi Stationers & Computers Ltd has a legal duty to document workplace incidents/accidents and to report certain types of accidents, injuries and dangerous occurrences arising out of its work activity to the relevant enforcing authority.
3.2.16 Incidents and accidents will be investigated to establish what lessons can be learned to prevent such incidents/accidents reoccurring including the introduction of additional safeguards, procedures, information instruction, and training, or any combination of these. Monitoring is undertaken but on an anonymized basis. The information is also retained in the event of any claims for damages.
3.3 Use of Information
We may use and analyze your information for the following purposes:
3.3.1 Processing products and services that you have bought from Devi Stationers & Computers Ltd or third parties on our eCommerce platforms;
3.3.2 Billing you for using our or third-party products or services or taking the appropriate amount of credit from you;
3.3.3 Responding to any of your queries or concerns;
3.3.4 Verifying your identity information through publicly available and/or restricted government databases to comply with applicable regulatory requirements;
3.3.5 Carrying out credit checks and credit scoring;
3.3.6 Keeping you informed generally about new products and services and contact you with offers or promotions based on how you use our or third-party products and services unless you opt-out of receiving such marketing messages (you may contact Devi Stationers & Computers Ltd at any time to opt-out of receiving marketing messages);
3.3.7 to comply with any legal, governmental or regulatory requirement or for use by our lawyers in connection with any legal proceedings;
3.3.8 In business practices including quality control, training and ensuring effective systems operations;
3.3.9 To protect our network including to manage the volume of calls, texts and other use of our network;
3.3.10 To understand how you use our network, products, and services for purposes of developing or improving products and services;
3.3.11 Preventing and detecting fraud or other crimes and for debt recovery;
3.3.12 For research, statistical, survey and other scientific or business purposes;
3.3.13 Provide aggregated data (which do not contain any information which may identify you as an individual) to third parties for research and scientific purpose;
3.3.14 Administer any of our online platforms/websites.
3.4. Sensitive (Special Categories)
Data We may collect Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, information about your health, criminal convictions and offenses, gender, sexual orientation, and biometric data). We will rely on any of the legal basis provided in clause 3.5(Legal Basis) below for such collection.
3.5. Lawful Basis for processing your information
We will process your personal information based on any of the lawful basis provided for under the Data Protection Law:
3.5.1 The performance of a Product/Service Agreement with you;
3.5.2 Devi Stationers & Computers Ltd’s legitimate business interests;
3.5.3 Compliance with a mandatory legal obligation;
3.5.4 Consent you provide;
3.5.5 Public interest;
3.5.6 Your vital interest.
3.6. Retention of Information We will only retain your data for as long as reasonably necessary to fulfill the purposes we collected it for, including to satisfy any legal, regulatory, tax, accounting or reporting requirements. We may retain your data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data and whether we can achieve those purposes through other means, the need to comply with our internal policy and the applicable legal, regulatory, tax, accounting or other requirements. Anonymized information that can no longer be associated with you may be held indefinitely.
4.0 Disclosure of Information
4.1 Any disclosure of your information shall be under applicable law and regulations. Devi Stationers & Computers Ltd shall assess and review each application for information and may decline to grant such information to the requesting party.
4.2 We may disclose your information to:
a) law-enforcement agencies, regulatory authorities, courts or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand are compliant with the law.
b) our subsidiaries, associates, partners, software developers or agents who are involved in delivering Devi Stationers & Computers Ltd products and services you order or use;
c) Fraud prevention and Anti-money laundering agencies, credit reference agencies;
d) publicly available and/or restricted government databases to verify your identity information to comply with regulatory requirements;
e) debt-collection agencies or other debt-recovery organizations;
f) Survey agencies that conduct surveys on behalf of Devi Stationers & Computers Ltd;
g) Emergency service providers when you make an emergency call (or where such disclosure to emergency service providers is necessary for your rescue, health, and safety) including your approximate location;
h) Any other person that we deem legitimately necessary to share the data with.
4.3 Some of your information may be passed on to any person whom you receive mobile money from, or send or intend to send mobile money to. Your information may be available to any third party involved in the operation of the mobile money service including Lipa Na M-PESA Merchants, mobile money interoperability partners, ATM Switch providers and vendors of the M-PESA money transfer technology platform.
4.4 We shall not release any information to any individual or entity that is acting beyond its legal mandate.
4.5 We will get your express consent before we share your data with any third party for direct marketing purposes.
4.6 Direct Marketing
4.6.1 You may be required to opt-in or give any other form of explicit consent before receiving marketing messages from us.
4.6.2 You can ask us to stop sending you marketing messages at any time by writing to us or logging into our website, https://www.devikenya.com/ and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by attending to us or contacting us at any time through the provided contacts.
4.6.3 Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of [a product, service is already taken up, warranty registration, product or service experience or other transactions].
5.1 We may store some information (using "cookies") on your computer when you visit our websites. This enables us to recognize you during subsequent visits. The type of information gathered is non-personal (such as The Internet Protocol (IP) address of your computer, the date and time of your visit, which pages you browsed and whether the pages have been delivered successfully.
5.2 We may also use this data in aggregate form to develop customized services - tailored to your interests and needs. Should you choose to do so, it is possible (depending on the browser you are using), to be prompted before accepting any cookies, or to prevent your browser from accepting any cookies at all. This will, however, cause certain features of the web site not to be accessible.
6.0 The Use of Hyperlinks
6.1 Our websites may provide hyperlinks to other locations or websites on the Internet. These hyperlinks lead to websites published or operated by third parties who are not affiliated with or in any way related to us and have been included in our website to enhance your user experience and are presented for information purposes only.
6.2 We do not endorse, recommend, approve or guarantee any third- party products and services by providing hyperlinks to an external website or webpage and do not have any co-operation with such third parties unless otherwise disclosed. We are not in any way responsible for the content of any externally linked website or webpage.
7.0 Access to and Updating your Information
To update your information, go towww.devikenya.com and sign in to my profile to look at your personal information. You can change how we get in touch with you and your account details whenever you like.
8.0 Safeguarding and Protection of Information
Devi Stationers & Computers Ltd have put in place technical and operational measures to protect your information from unauthorized access, accidental loss or destruction.
9.0 International Data Transfers
From time to time we may need to transfer your personal information outside the Republic of Kenya. Where we send your information outside Kenya, we will make sure that your information is properly protected per the applicable Data Protection Laws.
10.0 Your Rights
Subject to legal and contractual exceptions, you have rights under data protection laws concerning your data. These are listed below: -
a) Right to be informed that we are collecting personal data about you;
b) Right to access personal data that we hold about you and request for information about how we process it;
c) Right to request that we correct your data where it is inaccurate or incomplete;
d) Right to request that we erase your data noting that we may continue to retain your information if obligated by the law or entitled to do so;
e) The right to object and withdraw your consent to the processing of your data. We may continue to process if we have a legitimate or legal reason to do so;
f) Right to request restricted processing of your data noting that we may be entitled or legally obligated to continue processing your data and refuse your request;
g) The right to request the transfer of your data in [an electronic format].
If you wish to exercise any of the rights set out above, please contact us on [email protected].
We may need to request specific information from you to help us confirm your identity and ensure your right to access your data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information concerning your request to speed up our response.
We try to respond to all legitimate requests within a reasonable time. Occasionally it could take us longer if your request is particularly complex or you have made many requests. In this case, we will notify you and keep you updated.
11.0 How to Contact Us
Our contact details as a Data Controller are as follows:
You have the right to complain with the relevant supervisory authority that is tasked with personal data protection within the Republic of Kenya
13.0 Non-Compliance with this Statement
Devi Stationers & Computers Ltd shall have the right to terminate any agreement with you for failure to comply with the provisions of this statement and reject any application for information contrary to this statement.
14.0 Amendments to this Statement
Devi Stationers & Computers Ltd reserves the right to amend or modify this statement at any time. If Devi Stationers & Computers Ltd amends this statement, you can access the most current version of the privacy statement by clicking this link Devi Stationers & Computers Ltd Privacy Statement so that you will always know how your personal information is being used or shared. Any amendment or modification to this statement will take effect from the date of notification on Devi’s eStore website.