PRIVACY POLICY

AULI Leather respects your privacy and is committed to handling your personal information responsibly.

This policy explains what information we collect, why we collect it and how it is used when you visit our website, contact us or place an order.

Our handling of personal data is guided primarily by the Kenya Data Protection Act and Data Protection Regulations. These require personal information to be collected lawfully and transparently, for clear purposes, limited to what is necessary and retained only for as long as required.

Information We Collect

When you use our website or place an order, we may collect:

  • Your name
  • Email address
  • Telephone number
  • Billing and delivery address
  • Order and purchase information
  • Communications with our customer care team
  • Marketing preferences
  • Device, browser and website usage information
  • Information collected through cookies and similar technologies

Payment information may also be processed by Shopify and the payment providers used to complete your transaction.

How We Use Your Information

We use personal information to:

  • Process and fulfil orders
  • Arrange delivery
  • Process returns and refunds
  • Communicate about your order
  • Provide customer support
  • Prevent fraud and protect our website
  • Meet accounting, tax and legal requirements
  • Improve our website and customer experience
  • Send marketing communications where you have agreed to receive them

Kenyan law allows processing where, among other grounds, it is necessary to perform a contract, comply with legal obligations, pursue legitimate interests where appropriate, or where the customer has provided valid consent.

Marketing

We will only use your information for direct marketing in accordance with applicable data-protection requirements.

You can unsubscribe from marketing emails at any time using the unsubscribe option provided in our communications.

Kenyan regulations require customers to be informed about direct marketing and provide a clear way to opt out.

Who We Share Information With

We may share information where necessary with service providers that help us operate AULI, including:

  • Shopify
  • Payment providers
  • Delivery and courier companies
  • Website and technology providers
  • Analytics and marketing providers
  • Accountants, advisers or authorities where legally required

We only share information that is reasonably necessary for the relevant service.

International Data Transfers

Some technology and service providers may process information outside Kenya.

Where personal information is transferred outside Kenya, AULI will handle such transfers in accordance with applicable Kenyan data-protection requirements, including requirements relating to appropriate safeguards.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected or to meet legal, accounting, tax, dispute-resolution or regulatory requirements.

Kenyan data-protection principles expressly require personal data not to be kept in identifiable form longer than necessary.

Your Rights

Under Kenyan data-protection law, you may have the right to:

  • Know how your information is being used
  • Access personal information held about you
  • Object to certain processing
  • Request correction of inaccurate information
  • Request deletion where legally applicable
  • Withdraw consent where processing is based on consent

The ODPC confirms these rights for Kenyan data subjects.

To exercise your privacy rights, contact:

Email: [ADD PRIVACY EMAIL]

Cookies

Our website may use cookies and similar technologies required to operate the store, understand website usage and, where permitted, support marketing.

Where consent is required, customers will be provided with appropriate choices through the website.

Security

We take reasonable technical and organisational measures to protect personal information.

Kenyan law also requires organisations to implement safeguards for the integrity and confidentiality of personal data and imposes specific notification requirements for qualifying personal-data breaches.

Complaints

If you believe your personal information has been handled unlawfully, please contact us first so we can address the issue.

You also have the right to raise data-protection concerns with Kenya's Office of the Data Protection Commissioner (ODPC).

Updates

We may update this Privacy Policy when our services, technology or legal obligations change.

The latest version will always be published on this website.