1. Who we are

Monsoon Furnitures Ltd (“Monsoon Furniture”, “we”, “us”) is a furniture retailer and workshop operating in Kenya, with showrooms in Kasarani, Ngong Road and Ruiru Bypass, and an online store at monsoonfurniture.co.ke.

For the purposes of the Data Protection Act, No. 24 of 2019, we are the data controller of the personal data described in this policy. That means we decide what data is collected and what it is used for.

This policy gives effect to your right to privacy under Article 31(c) and (d) of the Constitution of Kenya, 2010.

2. The personal data we collect

We only collect what we need to sell you furniture, build custom pieces and deliver them.

We do not deliberately collect sensitive personal data — such as health, religion, ethnicity, or biometric data — and we ask that you do not send it to us.

3. How we collect it

• Directly from you — when you place an order, create an account, message us on WhatsApp, call, email, complete a contact form, request a quote, or book a site measurement.
• Automatically — through cookies and similar technologies when you browse the site (see section 5).
• From third parties — payment providers confirming a transaction, and delivery partners confirming a drop-off.
• In person — when you visit one of our showrooms and give us your details, or place an order at the counter.

4. Why we use your data, and our lawful basis

Section 30 of the Act requires us to have a lawful basis for every use of your data. Ours are set out below.

Where we rely on consent, you can withdraw it at any time and we will stop. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

5. Cookies and tracking

Cookies are small files placed on your device. We use them for four purposes:

• Strictly necessary — keeping items in your cart, keeping you signed in, and processing checkout. The site cannot work without these.
• Performance — our caching system serves pages faster.
• Analytics — Google Analytics, to understand which products and pages people look at.
• Advertising — the Meta (Facebook) Pixel, which lets us measure our adverts and show them to people likely to be interested in our furniture.

6. Who we share your data with

We do not sell your personal data. We share it only with parties who need it to deliver our service to you:

• Payment providers — Safaricom (M-Pesa) and our bank or card gateway, to take and confirm payment.
• Delivery and logistics partners — your name, phone number and address, so they can find you.
• Our web host and IT providers — who store the site and its database on our behalf.
• Meta Platforms and Google — where you have consented to advertising and analytics cookies.
• Professional advisers — accountants and lawyers, where necessary.
• Government authorities — where we are required by law, including the Kenya Revenue Authority and any lawful order of a court.

Everyone we share data with is required to keep it secure and to use it only for the purpose we gave it to them for.

7. Transfers outside Kenya

Some of the services we use store data on servers outside Kenya. This applies to our web hosting, our email, and to Meta and Google where you have consented to their cookies.

Under Section 48 of the Act, we may only transfer your personal data out of Kenya where there is proof of appropriate safeguards in the receiving country, or where you have consented to the transfer having been told of the risks. We satisfy ourselves that one of these conditions is met before any transfer takes place.

8. How long we keep your data

We keep personal data only as long as we need it.

When a retention period ends, we securely delete the data or irreversibly anonymise it.

9. How we protect your data

• Our site is served over an encrypted HTTPS connection.
• Access to customer records is limited to staff who need it to do their job.
• Accounts holding customer data are protected by strong, individual passwords.
• We do not store full card numbers, card PINs or M-Pesa PINs at any point.
• We keep our website software, plugins and server patched and up to date.

Never share your M-Pesa PIN with anyone, including anyone claiming to be from Monsoon Furniture. We will never ask you for it.

10. Your rights

Section 26 of the Data Protection Act, 2019 gives you the following rights over your personal data:

You also have the right not to be subject to a decision based solely on automated processing that significantly affects you. We do not make decisions about you in this way.

Exercising these rights is free of charge.

11. How to exercise your rights

Email us at info@monsoonfurniture.co.ke or call +254 791 773 251 and tell us which right you want to exercise.

We may ask you to confirm your identity before we act, so that we do not release your data to someone else. We will respond as quickly as we reasonably can, and in any event within the period required by the Act and its Regulations.

12. Complaints

If you are unhappy with how we have handled your personal data, please contact us first — most issues are resolved quickly.

You also have the right to lodge a complaint directly with the Office of the Data Protection Commissioner, which regulates data protection in Kenya. Their contact details and complaint process are published at odpc.go.ke.

13. Children

Our website and services are intended for adults. We do not knowingly collect personal data from children under 18. Where we become aware that we hold data belonging to a child without proper parental consent, we delete it. If you believe a child has given us their data, please contact us and we will remove it.

14. Changes to this policy

We review this policy regularly and may update it as our business, technology or the law changes. The date at the top of this page shows when it was last revised. Where a change materially affects how we use your data, we will make that clear on the site.