This Privacy Policy explains how Werok Systems Limited(“Werok Systems”, “we”, “us”) collects, uses, shares and protects your personal data when you use https://www.werok.co.ke or interact with our services. We are committed to handling your data in line with the Kenya Data Protection Act, 2019 and, where applicable, the EU/UK General Data Protection Regulation (GDPR).
1. Who we are (Data Controller)
Werok Systems Limited, The Bazar, 9th Floor, Moi Avenue, Nairobi, Kenya. For any privacy request, contact our Data Protection contact at info@werok.co.ke or +254 728 876 981.
2. Personal data we collect
- Identity & contact: name, email, phone number, delivery/billing addresses.
- Order & transaction data: items purchased, order history, quotations, payment method and references (we do not store full card numbers — these are handled by our payment processors).
- Account data: login credentials (passwords are stored only as salted hashes), saved addresses, wishlist, reviews and support messages.
- Technical data: device/browser type, IP address, and cookie identifiers (see our cookies section).
- Marketing data: your subscription status and engagement with our emails (opens/clicks), where you have opted in.
3. How and why we use your data (lawful bases)
- To perform our contract with you — process orders, payments, delivery, quotations, invoices and KRA eTIMS-compliant receipts.
- Legitimate interests — securing our platform, preventing fraud, improving our products and service, and responding to your enquiries.
- Consent — sending marketing communications and setting non-essential cookies. You may withdraw consent at any time.
- Legal obligation — tax, accounting and regulatory requirements (e.g. KRA).
4. Sharing and disclosure
We share data only as needed with:
- Payment providers (e.g. Safaricom M-Pesa, card processors) to take payment.
- Delivery partners/riders to fulfil your order.
- Communication providers (email and SMS) to send transactional and, where consented, marketing messages.
- The Kenya Revenue Authority and other authorities where legally required.
- Professional advisers and service providers acting on our instructions under confidentiality.
We never sell your personal data.
5. Cookies
We use strictly necessary cookies (for the cart, sign-in and security) and, with your consent, analytics/marketing cookies. You can accept or decline non-essential cookies via our cookie banner and change your choice at any time through your browser settings.
6. Data retention
We keep personal data only as long as necessary for the purposes above — typically for the life of your account and thereafter as required for tax, warranty and legal purposes (generally up to 7 years for transaction records).
7. Security
We apply appropriate technical and organisational measures — encryption in transit (HTTPS), hashed passwords, encrypted storage of sensitive credentials, access controls and audit logging. No method of transmission is 100% secure, but we work to protect your data and to notify you and the Office of the Data Protection Commissioner (ODPC) of any breach as required by law.
8. Your rights
Under the Data Protection Act, 2019 (and GDPR where applicable) you have the right to:
- be informed of how your data is used;
- access a copy of your personal data;
- request correction of inaccurate or incomplete data;
- request erasure (“right to be forgotten”) where applicable;
- object to or restrict processing, including direct marketing;
- data portability; and
- withdraw consent at any time.
To exercise these rights, email info@werok.co.ke. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya) (odpc.go.ke), or your local supervisory authority if you are in the EU/UK.
9. International transfers
Some of our service providers may process data outside Kenya. Where this happens, we take steps to ensure an adequate level of protection consistent with the Data Protection Act and GDPR safeguards.
10. Children
Our services are not directed at children under 18, and we do not knowingly collect their data.
11. Changes
We may update this policy; material changes will be posted here with a revised “last updated” date.
12. Contact
Werok Systems Limited · The Bazar, 9th Floor, Moi Avenue, Nairobi · info@werok.co.ke · +254 728 876 981