Privacy Policy & Cookie Disclosure

1. Principles of Data Processing

In accordance with the Kenya Data Protection Act 2019, Jay Digital Solutions collects, processes, and stores personal and commercial data strictly in accordance with lawful principles:

• Lawfulness, Fairness & Transparency: We collect only necessary data with explicit notice and consent.
• Purpose Limitation: Collected data is used solely for order processing, logistics, warranty tracking, and technical support.
• Data Minimization: We do not ask for or store unnecessary personal details.
• Accuracy: We ensure customer contact records and tax identification details remain accurate for KRA compliance.

2. Categories of Information Collected

• Personal Contact Data: Name, corporate business title, company name, telephone number (for M-Pesa billing and courier dispatch), and email address.
• Fiscal & Delivery Information: Physical delivery address in Kenya, county, and customer KRA PIN (required under Kenyan law for electronic eTIMS tax invoices).
• Customer Support Records: Order numbers, serial numbers of purchased IT equipment, warranty claim histories, and technical consultation briefs.
• Technical Telemetry: Anonymized IP addresses, device types (Mobile/Desktop), operating systems, and referrers to prevent cyber threats and bot spamming.

3. Cookies & Third-Party Analytics Disclosure

Our website utilizes essential session identifiers and standard third-party marketing tags:

• Essential Session Cookies: Required to maintain your active shopping cart, secure login sessions, and CSRF attack prevention.
• Google Analytics 4 (GA4): Aggregates anonymized traffic insights to evaluate which educational blog guides and hardware categories serve users best.
• Google Ads & Conversion Attribution: Evaluates the performance of search campaigns and measures conversion actions (such as outbound WhatsApp inquiries and completed checkouts).
• Meta (Facebook) & TikTok Pixels: Measures the effectiveness of our social community engagements and product catalog showcases.

You can configure your browser to reject non-essential cookies at any time without restricting your ability to browse our catalog or contact our sales team.

4. Data Security & Encryption

We protect customer records using commercial-grade security protocols:

• All web communication is encrypted using 256-bit Secure Sockets Layer (SSL/TLS).
• Payment processing (M-Pesa, Card gateways) is executed through certified PCI-DSS compliant third-party gateways; we never store financial credentials or M-Pesa PINs.
• Database servers are protected behind next-generation web application firewalls and bot-filtering security shields.

5. Your Legal Rights Under KDPA 2019

Under the Kenya Data Protection Act 2019, you have the right to:

• Request confirmation of whether we hold your personal data and access a copy thereof.
• Request prompt rectification of inaccurate, false, or outdated personal information.
• Request deletion or erasure of personal records where there is no statutory obligation (e.g. KRA tax retention rules) requiring retention.
• Object to the processing of your data for direct marketing purposes.