Privacy policy

Draft template: sections marked [in brackets] must be completed by Ironcore Solutions Limited and reviewed before launch.

Ironcore Solutions Limited (“we”) processes personal data in line with the Data Protection Act, 2019 (Kenya). [Business to confirm ODPC registration status and data protection contact.]

What we collect and why

Name, phone, email and delivery address — to fulfil and deliver your order and contact you about it.
Company name, KRA PIN, PO reference (optional) — for business invoicing.
Payment references (e.g. M-Pesa receipt numbers) — to confirm and reconcile payments. We never see or store your M-Pesa PIN.
Anonymous usage events (pages viewed, searches) — to improve the shop. These are not linked to your name or phone, and are not collected if your browser sends Do Not Track or Global Privacy Control.

Sharing

We share data only with service providers needed to fulfil your order: payment (Safaricom M-Pesa), delivery partners, and [hosting/SMS/email providers — business to list]. We do not sell personal data.

Retention

[Business to confirm retention periods — e.g. order and tax records for the period required by Kenyan tax law; marketing data until you opt out.]

Your rights

You may request access to, correction of, or deletion of your personal data, or object to processing, by contacting solutionsironcore@gmail.com / 0795895052. You may also complain to the Office of the Data Protection Commissioner.

Cookies and storage

We use your browser's local storage to keep your cart and comparison list on your device, and a session cookie for staff sign-in. We do not use advertising cookies.