Our Privacy Policy

Effective Date: 01—1-2026

1. Introduction

Furniture International Limited (“Company”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website, request quotations, purchase our products, or engage our interior design services.

This Policy has been prepared in accordance with the Data Protection Act, No. 24 of 2019, the Data Protection (General) Regulations, 2021, and other applicable laws of Kenya.

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

• your name;
• telephone number;
• email address;
• postal or physical address;
• delivery address;
• company details (where applicable);
• project location;
• interior design preferences;
• floor plans, measurements, photographs, and design specifications;
• communications with us;
• IP address;
• browser information;
• cookies and website usage information.

3. How We Collect Personal Data

We collect personal information when you:

• browse our website;
• submit an enquiry;
• request a quotation and or order;
• upload design information or project documents;
• communicate with us by email, telephone, WhatsApp, social media, or other electronic means;

4. Purpose of Processing

We process personal data for the following purposes:

• responding to enquiries;
• preparing quotations;
• manufacturing and supplying furniture;
• providing interior design services;
• arranging delivery and installation;
• processing payments;
• communicating with customers;
• improving our website and services;
• complying with legal obligations;
• preventing fraud and cybercrime;
• maintaining the security of our systems;
• enforcing our legal rights.

5. Legal Basis for Processing

We process personal data where:

• processing is necessary for the performance of a contract;
• processing is required by law;
• you have given your consent;
• processing is necessary for our legitimate business interests, provided such interests do not override your rights and freedoms.

6. Cookies

Our website uses cookies and similar technologies to:

• improve website functionality;
• remember user preferences;
• analyze website traffic;
• enhance website security.

7. Sharing Personal Information

We may disclose personal information to:

• delivery and logistics providers;
• payment service providers;
• professional advisers;
• regulatory authorities and law enforcement agencies where required by law.

8. International Transfers

Where personal information is transferred outside Kenya, we shall ensure that appropriate safeguards are implemented in accordance with the Data Protection Act and GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect personal information against accidental loss, unauthorized access, disclosure, alteration, or destruction.

These measures include access controls, password protection, secure storage, encryption where appropriate, anti-malware systems, firewalls, and regular monitoring.

Unauthorized access to or interference with our information systems may constitute an offence under the Computer Misuse and Cybercrimes Act, No. 5 of 2018, and may be reported to the relevant authorities.

10. Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

Where personal information is no longer required, it will be securely deleted, anonymized, or destroyed.

11. Your Rights

Subject to applicable law, you have the right to:

• be informed about the processing of your personal data;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal data where legally permissible;
• object to certain forms of processing;
• withdraw consent where processing is based on consent;
• request restriction of processing in appropriate circumstances;
• lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

12. Children’s Privacy

Our website is not intended for children, and we do not knowingly collect personal information from children without appropriate legal authority.

13. Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of such websites.

14. Data Breach Notification

Where a personal data breach occurs that poses a real risk to your rights and freedoms, we shall respond in accordance with the requirements of the Data Protection Act, including notification to the Office of the Data Protection Commissioner and affected individuals where required by law.

15. Changes to this Privacy Policy

We may update this Privacy Policy periodically. The latest version will always be published on this website.