Privacy Policy
Last Updated: May 29, 2025
At Vapezone Kenya, we committed to protecting your privacy and ensuring transparency about how we handle your personal information.
1Introduction
Welcome to Vapezone Kenya. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, make a purchase, or interact with us.
We operate in compliance with the Kenyan Data Protection Act, 2019, and the regulations set by the Office of the Data Protection Commissioner (ODPC).
By using our Site and services, you consent to the practices described in this policy.
2Information We Collect
We collect information that you provide directly to us and information about your use of our Site.
A. Information You Provide to Us:
- Personal Identifiers: Name, email address, phone number, shipping address, and age/date of birth for age verification.
- Order Information: Details of products you purchase, transaction history, and customer service communications.
- Payment Information: We use trusted third-party payment processors (e.g., M-Pesa, credit card processors). We do not store your full payment details on our servers.
- Account Information: If you create an account, we collect an email, username and password.
- Communications: Records of correspondence if you contact us via email, phone, or social media.
B. Information Collected Automatically:
- Device and Usage Data: IP address, browser type, device information, pages you visit, time spent on pages, and other diagnostic data collected using cookies.
- Location Data: We may derive a general geographic location from your IP address to ensure we can ship to your area and comply with Kenyan regulations.
3How We Use Your Information
We use your personal data for the following purposes, relying on the legal bases of performance of a contract, consent, and legitimate interests:
- •To Process and Fulfill Your Orders: To complete your purchase, arrange shipping, and send you invoices and order confirmations. (Performance of a contract)
- •Age Verification: To verify that you are 18 years of age or older, as required by law to purchase vaping products. (Legal obligation and legitimate interest)
- •Customer Service: To respond to your inquiries, comments, or complaints. (Legitimate interest)
- •Marketing and Promotions (with your consent): If you opt-in, we will send you information about new products, special offers, and updates. You can opt-out at any time. (Consent)
- •Improving Our Site and Services: To analyze trends, administer the site, and understand how users interact with our content. (Legitimate interest)
- •Security and Fraud Prevention: To protect our business and our customers from fraudulent transactions and other illegal activities. (Legitimate interest and legal obligation)
6Your Data Protection Rights
Under the Data Protection Act, 2019, you have the following rights regarding your personal data:
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any inaccurate or incomplete data.
Right to Erasure
You can request that we delete your personal data, subject to certain legal limitations.
Right to Restrict Processing
You can request that we suspend the processing of your personal data.
Right to Data Portability
You can request a copy of your data in a structured, machine-readable format.
Right to Object
You can object to the processing of your data based on our legitimate interests.
To exercise any of these rights, please contact us using the details in Section 10.
10Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.