How Copitronix Technologies Ltd handles customer, order, and website data.

This Privacy Policy explains how Copitronix Technologies Ltd collects, uses, stores, shares, and protects personal data through this website, customer account features, quote and service forms, checkout, order tracking, email, telephone, WhatsApp, and related support channels. It is prepared for a Kenyan ecommerce and printer-supply business and should be reviewed by the business and a qualified Kenyan legal professional before final publication.

1. Company identity and contact information

Copitronix Technologies Ltd supplies printers, toners, ink cartridges, printer spare parts, accessories, maintenance kits, refurbished printer options, and related support for customers in Kenya. The business contact email is info@copitronixglobal.com. The listed business address is Valji Building, 2nd Floor 201A, P.O. Box 59272-00200 City Square, Nairobi.

2. Scope of this policy

This policy applies to personal data processed through Copitronix public website pages, customer account pages, request availability forms, request service forms, contact forms, newsletter subscriptions, checkout, order tracking, staff order handling, and administrative records. It does not govern third-party websites such as WhatsApp, Google Maps, courier platforms, payment providers, manufacturer websites, or social platforms once you leave this website.

3. Legal framework

Copitronix handles personal data with reference to Kenya's Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and related guidance from the Office of the Data Protection Commissioner. These laws require personal data to be processed lawfully, fairly, transparently, for a specific purpose, and with appropriate safeguards.

4. Personal data we collect

The website collects only the information needed for customer service, sales, delivery, account access, security, and lawful business records. Depending on how you use the site, this may include:

• Identity and contact details: name, email address, phone number, company or institution name where provided, delivery or pickup contact details, and message content.
• Order and checkout details: cart items, SKU, product names, quantities, prices, delivery location, delivery fee, address notes, order notes, order reference, payment method, payment status, fulfilment status, and order history.
• Inquiry and service details: printer model, cartridge code, spare part number, fault symptoms, error messages, urgency, preferred brands, delivery area, budget notes, and any other details submitted by the customer.
• Account information: login identifiers, password hashes, verification codes or tokens, saved profile details, saved addresses where enabled, wishlist activity, and account security events.
• Payment and reconciliation data: payment method, transaction reference, amount, provider callback status, and receipt or confirmation details. The website should not ask customers to type full card numbers directly into Copitronix forms.
• Newsletter information: name, email address, subscription source, subscription status, and email timestamps where stored.
• Technical and security data: IP address, browser/user agent, timestamps, requested URLs, session identifiers, CSRF tokens, rate-limit/security logs, error logs, and audit logs.
• Browser storage: local cart, wishlist, compare list, preferred shop view, and cookie preference choice stored in your browser.

5. Why we process personal data

Copitronix processes personal data for practical business purposes connected to customer requests and website security, including to:

• respond to contact, quote, service, compatibility, and availability requests;
• prepare quotations, product alternatives, delivery information, invoices, receipts, and order updates;
• create and manage website orders and customer accounts;
• coordinate delivery, pickup, warranty review, returns, refunds, and after-sales support;
• protect the website against spam, duplicate submissions, fraud, unauthorized access, and misuse;
• keep accounting, audit, tax, warranty, dispute, and customer support records;
• send newsletter or marketing communication only where the customer has subscribed or another lawful basis applies;
• improve product listings, form clarity, navigation, and customer support workflows.

6. Lawful bases for processing

The applicable lawful basis depends on the activity. Processing may be necessary to take steps requested by a customer before entering into a sale, to perform an order or service arrangement, to comply with legal obligations such as accounting and tax recordkeeping, to pursue legitimate business interests such as security and customer support, or to process consent-based marketing and optional cookies. Where consent is used, the customer may withdraw consent, but withdrawal does not affect processing that was lawful before withdrawal or records that must be kept for another lawful reason.

7. Payments and payment service providers

Checkout may support order requests, M-Pesa, card, or other payment options depending on what is enabled for the website at the time of purchase. If online payment is enabled, payment providers process payment details under their own systems and terms. Copitronix may store transaction references, callback status, amount, phone or contact details used for payment, and reconciliation records so that orders can be matched to payments and support requests.

8. Hosting, email, delivery, and technical service providers

Personal data may be processed by hosting providers, email delivery tools, payment providers, delivery or courier partners, IT support providers, accounting or professional advisers, and security tools where needed to operate the business. Copitronix should keep the list of active processors under review. Customers should not assume that every third-party integration shown in code is active until the business enables it.

9. Delivery partners and customer communication

Where delivery or courier support is used, only the details needed to deliver or confirm the order should be shared, such as recipient name, phone, delivery location, package details, and order reference. Customers may also choose to contact Copitronix through WhatsApp, email, telephone, or external map/social links. Those third-party services may collect data under their own policies.

10. Cookies and browser storage

This website uses essential session and CSRF protections, a cookie preference cookie, and browser storage for cart, wishlist, compare list, and shop view preferences. A customer remember-me cookie may be used when account login remember-me is selected. No active analytics or advertising pixel was confirmed during this audit. Optional analytics or marketing storage should not be added without a clear business decision and an appropriate consent mechanism. Read the Cookie Policy for the detailed storage list.

11. Marketing communications

Newsletter subscription is separate from order processing. A customer should be able to place an order or send a service request without subscribing to marketing. Marketing messages should include a reasonable way to unsubscribe or request removal. Operational messages about orders, quotes, receipts, warranty, delivery, or security are not treated as optional marketing.

12. Data retention

Copitronix keeps personal data only for as long as reasonably needed for the reason it was collected and for related legal, accounting, tax, audit, warranty, security, and dispute purposes. Specific retention periods require business approval. Until a formal retention schedule is approved, Copitronix should apply documented criteria based on order status, accounting needs, warranty support, active customer relationship, security investigation needs, and legal obligations.

13. Security measures

The application uses security controls such as server-side validation, CSRF protection, password hashing, session protections, role-based administration, audit logging, rate limiting on sensitive workflows, local error logging, and separate Team and Developer access areas. These controls reduce risk but no website can guarantee absolute security. Customers should protect their login details and contact Copitronix promptly if they suspect unauthorized account use or incorrect order activity.

14. International transfers

Some technical, email, payment, map, messaging, or hosting services may process data outside Kenya. Where this happens, Copitronix uses practical safeguards and works with service providers that support secure handling of customer information.

15. Your rights

Subject to applicable law and necessary verification, customers may request access to their personal data, correction of inaccurate data, deletion where appropriate, objection to certain processing, restriction of certain processing, withdrawal of consent where processing is based on consent, and information about how their data is used. Some requests may be limited where records must be kept for legal, accounting, tax, security, warranty, or dispute reasons.

16. How to make a privacy request or complaint

Send privacy requests to info@copitronixglobal.com with enough information to identify the account, order, inquiry, or contact record. Copitronix may ask for verification before acting on a request. Customers may also contact the Office of the Data Protection Commissioner if they believe their data-protection rights have not been handled appropriately.

17. Policy updates

This policy may be updated when the website, payment methods, delivery arrangements, customer account features, processors, legal obligations, or business practices change. The effective date above should be reviewed whenever material changes are made.

18. Business approval required

The business should confirm its legal registration details, active payment processors, active hosting/email providers, delivery partners, data retention schedule, international transfer safeguards, newsletter practices, and any appointed privacy contact before treating this policy as final.