Privacy Policy
Last updated: 28 July 2026
Rithi respects your privacy. This Privacy Policy explains how Rithi, based in Nairobi, Kenya, collects, uses, stores and shares personal data when you browse this website, create an account, request a quote, subscribe to updates or place an order.
1. Who controls your personal data
Rithi is the data controller for personal data collected through this website. Privacy questions and requests may be sent to denis.m.majesty@gmail.com or made by telephone on 0714 168 346.
2. Information we collect
- Account and contact information, such as your name, email address and telephone number.
- Order, quotation, delivery and billing information needed to supply products or respond to requests.
- Messages, product reviews, support requests and newsletter or SMS preferences you provide.
- Technical information such as IP address, browser type, device information, server logs and cookie choices.
- Shopping activity such as cart contents, saved products and purchases.
3. Why we use personal data and our lawful reasons
- Accounts, orders and requested services: to create and secure an account, remember account preferences, process purchases and quotations, arrange delivery, communicate about orders, provide warranties and customer support, and take steps you request before a purchase.
- Safety, fraud prevention and service operation: to authenticate users, keep logs, diagnose faults, prevent misuse, protect customers and Rithi, maintain backups and improve essential shop functions, subject to applicable rights and safeguards.
- Legal and business records: to comply with tax, accounting, consumer-protection, data-protection and other legal obligations, and to establish or respond to legal claims.
- Optional communications and advertising: only where you give a separate, express choice, to send product news, useful buying guides, promotions or direct-marketing messages by the channel you select. Creating an account or placing an order does not require marketing consent.
4. Cookies and similar technologies
Essential cookies support security, accounts, shopping-cart and checkout functions. Optional cookies remain off until you choose them. Details and controls are available in our Cookie Policy and through the “Cookie settings” link in the footer.
5. Sharing and service providers
We may share only the data necessary to provide the requested service with hosting, ecommerce, payment, delivery, communications, professional-advisory, analytics (if enabled with consent) and fraud-prevention providers. These providers must use the information only for the agreed purpose and protect it appropriately. We do not sell or rent personal data. We do not currently upload account contact information to advertising platforms; if that changes, Rithi will provide a clear notice and obtain any consent required before doing so.
6. International transfers
If a service provider processes personal data outside Kenya, Rithi will use an applicable lawful transfer basis and appropriate safeguards as required by Kenyan data-protection law.
7. Retention and security
We retain account data while an account remains active and afterwards only for the period needed for orders, warranties, legal obligations, disputes, fraud prevention and documented business records. Marketing preferences and consent records may be retained as evidence of your choices and to respect an opt-out. Data that is no longer needed is deleted, anonymised or securely archived in line with an appropriate retention schedule.
Rithi uses reasonable technical and organisational safeguards appropriate to the risk, including access controls, least-privilege administration, secure passwords and account sessions, software updates, backups, logging, service-provider controls and encryption where appropriate. Access is limited to authorised people who need the information for their work. We investigate suspected incidents and will make legally required notifications. No website or transmission method can promise absolute security, so customers should use a strong, unique password and keep account access private.
8. Your rights
Subject to Kenyan law, you may ask to be informed about use of your data, access it, object to processing, correct inaccurate information, request deletion of false or misleading information, restrict processing, receive portable data where applicable, and withdraw consent. We may need to verify your identity before completing a request.
9. Marketing choices
Account registration asks separately whether you want promotional email and promotional SMS. These boxes are off by default. If you opt in, Rithi records the selected channel, the privacy-notice version and the time of your choice. You may withdraw either choice at any time without charge by using the unsubscribe option in an email, replying STOP where instructed in an SMS, changing a preference when account controls are available, or contacting Rithi. An opt-out will not stop essential messages about an order, security, warranty or service you requested.
10. Complaints
Please contact Rithi first so we can address your concern. You may also lodge a complaint with Kenya’s Office of the Data Protection Commissioner.
11. Children and policy updates
This storefront is not directed to children, and we do not knowingly use children’s data for marketing or profiling. We may update this policy as the website, service providers or legal requirements change; the updated date will appear at the top.