Privacy notice

The short version

• We collect what an order needs: your name, phone number, email, delivery address and the dimensions on your cut-list.
• We do not sell it, and we do not run advertising trackers on this site.
• This site sets two cookies, both needed to keep you signed in. There is no analytics cookie.
• M-Pesa payments are handled by Safaricom. We see the reference and the amount, never your PIN.
• You can ask for a copy of your data, or ask us to delete it, by emailing sales@aoginteriors.co.ke.

1. Who holds your data

AOG Interiors Limited, the joinery workshop in Industrial Area, Nairobi, is the data controller for everything described here. That means we decide what is collected and we are answerable for it under the Data Protection Act, 2019.

2. What we collect

When you create an account

Your name, email address and password. The password is stored as a hash, which means we cannot read it and cannot tell you what it is if you forget it. We also record what kind of customer you are, such as fundi, contractor or homeowner, because it changes what pricing you see.

When you order

Your phone number, your delivery address including county and town, the contents of your order and the dimensions on your cut-list. Cut-list panel sizes are kept with the order because a re-cut or a repeat run needs the same figures.

When you contact us

Whatever you put in the message, plus the address or number you sent it from. WhatsApp conversations sit on WhatsApp, under Meta's terms, not ours.

Automatically

Our server records the usual request log: the page asked for, the time, the browser's user agent and the IP address it came from. This is how a fault gets diagnosed and how abuse gets blocked. We do not build a profile from it.

3. Why we hold it

To do the job you asked for

Cutting, edging, delivering and invoicing. Without your dimensions and your address there is no order. This is the contract we have with you.

Because the law requires it

Invoices, payment records and VAT records have to be kept for a set period whatever either of us would prefer.

Because we have a legitimate interest

Keeping the site working, stopping fraud, and keeping a record of what we quoted in case a job is queried later.

Because you said yes

The newsletter, and nothing else. Consent is the only basis we use for marketing, and every email carries a one-click unsubscribe.

4. Payments

You pay by M-Pesa to our Paybill, by bank transfer, or in cash at the workshop. Card details are never entered on this site because this site does not take cards.

For M-Pesa, Safaricom processes the payment and we receive the transaction reference, the amount, the time and the paying number. Your M-Pesa PIN is never seen by us and never passes through this site. We store the reference against your order so a payment can be matched to a job and later proved.

5. Cookies and browser storage

This site sets two cookies. Both are strictly necessary, which means the site cannot do its job without them, so neither asks for consent. Neither is used for advertising and neither is read by anybody but us.

aog_session

Keeps you signed in. Holds your session token and your name and role, so a page can greet you without a database call. Set only after you sign in, marked httpOnly so no script on the page can read it, and it expires after 14 days. Signing out deletes it.

aog_otp

Present only in the minutes between asking for an email sign-in code and entering it. It holds the reference for the code that was sent so we can check the one you type. It goes as soon as you are in.

Three other things are kept in your browser's own storage rather than in a cookie, which means they never leave your device and are never sent to us:

• aog:cart holds your basket, so closing the tab does not empty it.
• aog:cutlist holds a cut-list you are still working on.
• aog:theme remembers whether you chose light or dark.

Clearing your site data in the browser removes all three. There is no analytics, no advertising pixel and no third-party tracker on this site. If that ever changes, this section changes with it and the notice at the bottom of the page will ask you first.

6. Who else sees it

We share your data with four kinds of people, and no others:

• Safaricom, to process an M-Pesa payment and confirm it landed.
• The driver or courier delivering your order, who gets your name, phone number and address and nothing about what you paid.
• Our email provider, to deliver an order update, a sign-in code or a password reset.
• Our accountant and, where required, KRA, for invoices and tax records.

We do not sell your data, we do not rent it, and we do not pass it to anyone for their own marketing. Our database is self-hosted rather than run by a third-party platform, which is why the list above is as short as it is.

7. How long we keep it

Order and invoice records

Seven years, because tax law requires it.

Your account and saved cut-lists

As long as the account is open. Ask us to close it and we delete the profile, the addresses and the saved cut-lists, and keep only the invoice records above.

Contact messages and enquiries

Two years, then deleted.

Server request logs

Ninety days.

Newsletter subscription

Until you unsubscribe, and the record of the unsubscribe is kept so we do not email you again.

8. Your rights

Under the Data Protection Act, 2019 you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong, which you can also do yourself under Account;
• delete what we hold, except records the law makes us keep;
• stop using it for a particular purpose, marketing included;
• hand it over in a portable form, or send it to someone else.

Email sales@aoginteriors.co.ke and we will answer within 30 days. We may ask you to confirm who you are first, because handing an order history to the wrong person is its own breach.

If you are not satisfied with how we handled it, you can complain to the Office of the Data Protection Commissioner in Kenya. Doing that does not cost you anything and does not affect your order.

9. Reaching us

Email

sales@aoginteriors.co.ke

Phone

+254 729854141

Workshop

AOG Interiors Workshop, Industrial Area, Nairobi, Kenya

If we change this notice, the date at the top of the page changes and the material changes are announced on the site rather than made quietly.