Privacy Policy

Welcome to Funzone Toys Ventures  (“Company”, “we”, “our”, “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (the “Website”) or shop via our online toy store powered by WooCommerce.

This Policy is prepared in line with the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.

1. Who we are & how to contact us

Business name: Funzone Toys Ventures 
Physical store: Store: Royal Palms Mall, Wing B Third Floor, Shop BS35, Nairobi Kenya.

Email: sales@funzonetoys.co.ke
WhatsApp:+254741290909
Opening hours:  Every day, 8:00 am – 6:00 pm

If you have any questions about this Policy or how we handle your data, you can reach us using the details above.

2. What data we collect

We only collect the information we need to run our toy store and serve you properly. This may include:

Identity & contact data: your name, email address, phone number.
Order & delivery data: billing and shipping addresses, items ordered, delivery instructions.
Account data: if you create an account on our Website (username, order history, saved addresses).
Payment data: payment confirmations and references. Actual card, wallet or M-Pesa PIN details are handled by our payment partners; we do not store your PINs or full card numbers.
Technical data: IP address, device and browser type, operating system, referral URLs, pages visited, time spent on pages and similar usage data.
Cookies and similar technologies: small files saved on your device to help our store function and improve your experience (see section 7).

3. Lawful bases for processing

Under Kenyan law, we process personal data on one or more of the following legal bases:

Contract: to receive, confirm, process and deliver your orders, and to provide customer support.
Legal obligation: to keep business records, handle taxes, prevent fraud, and respond to lawful requests from authorities.
Legitimate interests: to operate, secure and improve our Website, products and services, provided these interests are balanced against your rights and expectations.
Consent: for optional activities like email/SMS/WhatsApp marketing and certain analytics/advertising cookies. You can withdraw your consent at any time.

4. How we use personal data

We may use your personal data to:

Process and fulfil your orders, including sending confirmations and delivery updates.
Provide customer support and manage your account (if you register one).
Run, maintain and improve our Website, online store and overall user experience.
Send you direct marketing communications (with your consent) and important service notices (non-marketing).
Monitor, prevent and investigate fraud or security issues, and perform troubleshooting and analytics.
Keep records and comply with our legal and regulatory obligations.

5. Who we share data with

We do not sell or rent your personal data. We only share it where necessary:

Service providers: such as couriers/riders, payment gateways, website hosting, email/SMS or WhatsApp messaging services, and analytics/advertising tools. These parties act on our instructions and are required to protect your data.
WooCommerce/WordPress plugins and extensions: that enable store functions like checkout, shipping, emails, inventory and security.
Regulators, authorities or professional advisers: when required by law or where necessary to establish, exercise or defend legal claims or protect our rights.

6. International transfers

Some of our service providers or tools may process data outside Kenya. When data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place (for example, contractual protections) so that your personal data remains adequately protected.

7. Cookies & similar technologies

We use cookies and similar technologies to:

Run essential store functions (like keeping items in your cart).
Remember your preferences and login status (if you have an account).
Improve performance and understand how visitors use our Website.

You can manage or block cookies through your browser settings, but note that disabling certain cookies may affect how our site and checkout work.

Examples of WooCommerce/WordPress cookies that may be used include:

woocommerce_cart_hash, woocommerce_items_in_cart – help WooCommerce know when cart contents change.
wp_woocommerce_session_* – a unique code for each customer to locate cart data in the database.
wordpress_logged_in_* – remembers your login status if you have an account.

With your consent, we may also use analytics and advertising cookies (for example, Google Analytics or Meta Pixel) to measure traffic, understand visitor behaviour and track marketing campaigns. You may withdraw consent or adjust your preferences at any time (see section 9).

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, or as required by law (for example, tax and accounting rules).

We maintain internal retention practices and regularly review data we hold. When information is no longer needed, we delete it or anonymise it so it can no longer be linked back to you.

9. Direct marketing & your choices

We value your time and privacy, so we handle marketing carefully:

We only send marketing messages via email, SMS or WhatsApp if you have given consent or where otherwise permitted by law.
Every marketing message includes a clear, no-cost way to opt out (for example, an unsubscribe link or “STOP” instruction).
You can also contact us directly at any time to update your preferences or opt out of all marketing communications.

Service or transactional messages (like order confirmations, delivery updates or important notices about your purchases) are not considered marketing and will still be sent where necessary.

10. Your rights

Subject to the Kenya Data Protection Act, 2019 and applicable regulations, you have the right to:

Request confirmation that we process your personal data and access a copy of that data.
Request correction/rectification of any inaccurate or incomplete information we hold about you.
Request deletion/erasure of personal data in the circumstances provided by law.
Object to or request restriction of certain types of processing, including direct marketing.
Withdraw consent at any time, where processing is based on consent.
Request data portability where technically feasible.

To exercise any of these rights or ask a question about your data, please contact us via:

Email: sales@funzonetoys.co.ke
Phone/WhatsApp: +254741290909

We may ask you for information to help verify your identity before acting on your request.

11. Children’s data

Our Website and store are intended for adults (such as parents, guardians and adults purchasing toys). We do not knowingly collect personal data from children for account creation or ordering. If you believe a child has provided us with personal data, please contact us immediately so we can take appropriate steps, including deleting the data where required.

12. Security

We use reasonable technical and organisational measures to safeguard personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no method of transmission over the internet or method of electronic storage is completely secure. Please keep your account credentials and devices safe and inform us promptly if you suspect any unauthorised access to your account or personal data.

13. Third-party links

Our Website may contain links to third-party websites, social media pages or services. We are not responsible for the privacy practices or content of those third parties. We recommend that you review their privacy policies before providing any personal data on their platforms.

14. Complaints

We encourage you to contact us first if you have any concerns, questions or complaints about how we handle your personal data. We will do our best to resolve the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya in accordance with the Data Protection Act and its regulations.

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. When we do, we will post the updated version on our Website with a new “Updated” date.

Your continued use of the Website or our services after such changes will be taken as acceptance of the updated Policy.

16. Payment processing note

Payments for orders are processed through secure payment gateways compatible with our WooCommerce store (for example, M-Pesa and card processors). These providers receive only the information needed to process your payment and are required to protect it appropriately. We do not store your M-Pesa PIN or full card details on our systems.