Effective Date: November 2025
Last Updated: November 2025

At Star Mabati Factory, we are committed to protecting your personal information and your right to privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website www.starmabati.com, make a purchase, or interact with our services online or offline.

Please read this policy carefully to understand our practices regarding your personal data. By accessing or using our website, you consent to the collection and use of information as described below.

1. About Us

Star Mabati Factory is a leading provider of high-quality roofing materials and accessories in Kenya. We operate an eCommerce platform where customers can view, order, and purchase roofing products such as Box Profile, Roman Tile, Versatile, and Corrugated Profiles, as well as accessories and related services.

This policy applies to all activities carried out under the Star Mabati Factory brand, both online and in person.

2. Information We Collect

We collect different categories of information to provide you with an efficient, customized, and secure shopping experience:

a) Personal Identification Information

• Full name

• Email address

• Phone number

• Physical and billing address

• Company name (if applicable)

• Account login credentials

b) Payment and Transaction Details

• Payment information (processed through secure third-party gateways such as M-Pesa, Visa, or bank transfers)

• Purchase and order history

• Delivery and invoice records

Note: We do not store your complete credit or debit card details. All sensitive payment data is encrypted and handled by trusted payment processors.

c) Technical and Usage Data

• IP address and location data

• Browser type, version, and device details

• Time spent on pages, navigation patterns, and referring sites

• Cookies, web beacons, and analytics data (Google Analytics or similar tools)

d) Communication Data

• Messages, reviews, or inquiries sent through our contact forms, WhatsApp, or email

• Customer service records and feedback

3. How We Use Your Information

We process your personal data for legitimate business purposes, including:

1. Order Processing: To receive, confirm, and deliver your orders.

2. Customer Service: To respond to inquiries, provide quotations, or assist with support.

3. Payments: To process secure transactions and send receipts or invoices.

4. Account Management: To create and manage customer profiles or vendor accounts.

5. Marketing & Promotions: To send offers, newsletters, or updates (only if you opt in).

6. Analytics & Improvements: To monitor performance, identify trends, and enhance user experience.

7. Legal & Security: To comply with applicable laws, resolve disputes, and prevent fraud or misuse.

4. Legal Basis for Processing (Under Kenyan & Global Standards)

We rely on one or more of the following legal bases to process your personal data:

• Consent: When you voluntarily provide information or subscribe to our marketing updates.

• Contractual Obligation: When processing your data is necessary to fulfill an order or agreement.

• Legal Obligation: When we are required to retain records for tax, warranty, or compliance reasons.

• Legitimate Interest: When processing helps us improve services, prevent fraud, or enhance security.

5. Sharing and Disclosure of Information

We do not sell, rent, or trade personal data to third parties. However, we may share limited information in these cases:

1. Service Providers & Partners:
   Delivery companies, logistics partners, payment gateways, and IT service providers assisting in daily operations.

2. Professional Advisors:
   Auditors, accountants, and legal consultants when necessary.

3. Regulatory Authorities:
   When required by law, court order, or official government request.

4. Business Transfers:
   In case of merger, acquisition, or asset sale, data may be transferred under confidentiality agreements.

Every third party we work with is contractually obligated to protect your data and use it only for the stated purpose.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law.
For example:

• Transaction and invoice data may be kept for up to 7 years for audit and tax compliance.

• User accounts remain active until deleted upon your request.

7. Data Security

We use advanced security measures to protect your data, including:

• Secure Socket Layer (SSL) encryption on all transactions

• Firewalled hosting servers

• Regular system updates and vulnerability testing

• Limited staff access to personal data

• Strong password and authentication protocols

Despite our best efforts, no online platform is completely secure, and we encourage users to protect their login credentials and report any suspicious activity immediately.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, analyze traffic, and remember preferences.

Types of Cookies We Use

• Essential Cookies: Enable core functionality like shopping cart and checkout.

• Analytics Cookies: Track site performance using tools like Google Analytics.

• Marketing Cookies: Personalize content and ads (only with consent).

You may disable cookies in your browser settings, though this may affect certain site functions.

9. Your Privacy Rights

Under the Kenya Data Protection Act (2019) and international privacy laws, you have the right to:

• Access your personal data.

• Request correction of inaccurate or outdated information.

• Request deletion of your personal data (subject to legal requirements).

• Withdraw consent for marketing communications.

• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if your rights are violated.

To exercise any of these rights, email us at info@starmabati.com.

---

10. Marketing Communication Preferences

We may send you promotional emails, SMS, or WhatsApp messages about new roofing products, offers, or factory updates.
You can unsubscribe at any time using the “Unsubscribe” link in our messages or by contacting our support team.

11. International Data Transfers

If your data is processed outside Kenya (for example, through international payment processors or cloud hosting services), we ensure that adequate safeguards and contractual protections are in place in line with applicable data protection laws.

12. Children’s Privacy

Our website and services are not directed toward children under the age of 18. We do not knowingly collect or store personal data from minors.
If you believe a child has provided us with personal data, please contact us immediately for removal.

13. Third-Party Links

Our website may contain links to third-party websites, such as banks, suppliers, or social media pages.
We are not responsible for the content or privacy practices of those websites. Please review their policies before sharing personal information.

14. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our services, technology, or legal obligations.
When updates are made, the “Last Updated” date at the top will change, and major revisions will be announced on our website.