Privacy Policy
Royal-Sceptre Company Ltd ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, why we collect it, how long we keep it, and the rights you hold under the Kenya Data Protection Act 2019 and aligned GDPR principles.
Royal-Sceptre has an office in Nairobi, Kenya, and serves clients across East Africa, Uganda, Rwanda, Malawi, Tanzania, Ethiopia, COMESA markets, and the wider Eastern and Southern Africa region.
1. Who We Are
Royal-Sceptre Company Ltd is an engineering and scientific instruments dealer based in Nairobi, Kenya. We distribute brands including UTEST, HIRA, LANGRY, and AIDUNY across Eastern and Southern Africa. As data controller, we determine the purposes and means by which your personal data is processed.
Data Protection Officer (DPO): sales@royalsceptre.com
2. Data We Collect
Identity & Contact Data
Full name, job title, company name, email address, telephone number, and physical/postal address collected at account registration or checkout.
Transaction Data
Purchase history, order values, product categories, invoice records, and payment confirmation references (we do not store full card numbers).
Technical & Usage Data
IP address, browser type, device identifiers, pages visited, time on site, referral source, and session duration — collected via cookies and server logs.
Marketing Preferences
Your opt-in/opt-out status for email newsletters, promotional SMS, and product updates. Marketing communication only occurs with your explicit consent.
3. How We Use Your Data
- Order Processing: Fulfil purchases, arrange delivery, issue invoices, and handle returns. Lawful basis: contract performance.
- Customer Support: Respond to enquiries, process warranty claims, and resolve disputes. Lawful basis: legitimate interests.
- Marketing Communications: Send product updates, promotions, and industry news only where you have given explicit consent. You may withdraw consent at any time. Lawful basis: consent.
- Legal Compliance: Maintain financial records as required by Kenya Revenue Authority and other regulatory bodies. Lawful basis: legal obligation.
- Website Improvement: Analyse anonymised usage data to improve site navigation and product discovery. Lawful basis: legitimate interests.
4. Third-Party Sharing
We do not sell your personal data to any third party. We share data only where strictly necessary:
- Logistics Partners: Name and delivery address shared with couriers (G4S, DHL, etc.) solely for order fulfilment.
- Payment Processors: Transaction data shared with our bank for payment verification. No card data stored on our servers.
- Google Analytics: Anonymised, aggregated usage data shared for website performance analysis. No personally identifiable information transmitted.
- Legal Authorities: Data disclosed only where required by a valid court order or statutory obligation under Kenyan law.
5. Data Retention
- Financial Records (invoices, orders): 7 years — required by Kenya Revenue Authority regulations.
- Marketing Consent Records: 2 years from last interaction, or until consent is withdrawn.
- Technical / Log Data: 12 months on a rolling basis.
- Inactive Accounts: Account data deleted or anonymised after 3 years of inactivity, following a notification email.
6. Your Rights
Right of Access
Request a copy of all personal data we hold about you. We will respond within 30 days.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in our systems.
Right to Erasure
Request deletion of your data where it is no longer necessary for the purpose collected, subject to our legal retention obligations.
Right to Portability
Receive your data in a structured, machine-readable format (CSV/JSON) for transfer to another controller.
Right to Object
Object to processing based on legitimate interests, including direct marketing. Objection to marketing will be honoured immediately.
Right to Restrict Processing
Request that we restrict processing while a complaint or accuracy dispute is being resolved.
To exercise any right, contact our DPO: sales@royalsceptre.com. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.