Privacy Policy

Malpa Enterprises Limited ("we", "our", or "us") is dedicated to protecting your privacy and personal data. This Privacy Policy details how we collect, process, store, and safeguard information across our website (malpaenterprises.com), physical showroom, and corporate fitout operations.

1. Information We Collect

We collect only the minimum personal and business data required to deliver furniture orders and provide corporate fitout services:

• Contact & Identification Data: Full name, company name, delivery address, phone number, WhatsApp contact, and email address.
• Billing & Tax Compliance: Company PIN, billing address, and transaction records required to issue valid KRA ETR tax invoices.
• Corporate Consultation & Space Planning: Office floor plans, architectural measurements, desk quantities, and staff ergonomic requirements.
• Digital & Analytics Data: IP address, device type, browser session information, and cookie identifiers used for cart persistence and site optimization.

2. How We Use Your Data (Lawful Basis)

Under Kenyan law and best international practices, we process your information under the following lawful grounds:

3. Information Sharing & Third Parties

We treat your business information with the strictest confidentiality. Data is shared only with vetted operational partners strictly necessary to complete your order:

• Delivery Logistics & Installation Crews: Trusted logistics personnel and technicians who deliver and assemble furniture at your site.
• Statutory Authorities: Kenya Revenue Authority (KRA) and regulatory bodies as mandated by Kenyan statute.
• Cloud & Communications Infrastructure: Encrypted hosting providers and Meta WhatsApp Business API for customer messaging.

4. Data Retention & Security Standards

We maintain robust technical and physical safeguards at our Mombasa Road facility and digital servers. Commercial sales and tax invoice records are retained for statutory periods required under Kenyan tax law, after which they are securely archived or expunged.

5. Your Data Protection Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

1. Access: Request a copy of the personal data we hold about your company or account.
2. Rectification: Request correction of inaccurate, incomplete, or outdated information.
3. Erasure: Request deletion of your personal data where continued processing is no longer required by law.
4. Object / Restrict: Opt-out of any promotional communications at any time.

6. Cookies & Tracking Technologies

Our website uses standard essential cookies to maintain shopping cart sessions, remember preferred filtering criteria, and measure aggregated website performance. You may configure your browser to block or disable cookies at any time without losing essential site browsing functionality.