INFINITYDIVA PRIVACY POLICY

    1. Introduction and Scope

    This Privacy Policy is issued in accordance with the Kenya Data Protection Act, 2019 and sets out how InfinityDiva collects, uses, discloses, stores, and safeguards personal data. It applies to all users who access or use 34.135.128.197/, its related applications, and associated digital services.

    InfinityDiva is committed to processing personal data lawfully, fairly, transparently, and in a manner that respects the rights and freedoms of data subjects as provided under Kenyan law.

    1. Data Controller

    For the purposes of the Data Protection Act, InfinityDiva is the Data Controller, determining the purpose and means of processing personal data collected through its website and services.

    1. Principles of Data Processing

    InfinityDiva processes personal data in accordance with the statutory principles set out under the Data Protection Act, including that personal data shall be:

    • Processed lawfully, fairly, and in a transparent manner
    • Collected for explicit, specified, and legitimate purposes
    • Adequate, relevant, and limited to what is necessary
    • Accurate and, where necessary, kept up to date
    • Retained only for as long as is necessary for lawful purposes
    • Processed in a manner that ensures appropriate security and confidentiality
    1. Categories of Personal Data Collected
    2. Personal Data Provided by the Data Subject

    We collect personal data that you voluntarily provide when interacting with our platform, which may include:

    • Identity data such as name and gender
    • Contact data including email address, telephone number, and delivery address
    • Account credentials and authentication information
    • Transaction and payment-related information
    • Customer service communications, reviews, and survey responses
    • Marketing preferences and consent records
    1. Personal Data Collected Automatically or from Third Parties

    When you access 34.135.128.197/, certain data is collected automatically or obtained from authorised third parties, including:

    • Device identifiers, IP address, browser type, and operating system
    • Website usage data, browsing patterns, and interaction history
    • Location data inferred from technical identifiers
    • Cookie data and similar online identifiers
    • Information received from payment processors, logistics partners, and analytics providers
    1. Cookies and Cookie Policy

    InfinityDiva uses cookies and similar technologies to enable core website functionality, improve user experience, analyse traffic, and support marketing activities where permitted.

    Details regarding the types of cookies used, their purpose, retention periods, and how users may manage or disable cookies are provided in our Cookie Policy, which forms an integral part of this Privacy Policy. Continued use of the website constitutes acceptance of the use of cookies in accordance with the Cookie Policy, subject to applicable consent requirements.

    1. Purposes of Processing Personal Data

    Personal data is processed strictly for legitimate and lawful purposes, including:

    • Registering and administering customer accounts
    • Processing orders, payments, and deliveries
    • Managing customer relationships and providing support services
    • Conducting promotions, competitions, and surveys
    • Improving website performance, security, and service quality
    • Personalising content and product recommendations, where consented
    • Detecting, preventing, and investigating fraud or misuse
    • Complying with legal, regulatory, and contractual obligations
    1. Lawful Basis for Processing

    InfinityDiva processes personal data only where a lawful basis exists under the Data Protection Act, including:

    • Consent of the data subject, which may be withdrawn at any time
    • Performance of a contract to which the data subject is a party
    • Compliance with a legal obligation imposed on the data controller
    • Legitimate interests, provided such interests do not override the rights and freedoms of the data subject
    1. Disclosure and Sharing of Personal Data

    Personal data may be shared with third parties solely for purposes consistent with this Privacy Policy, including:

    • Delivery and logistics service providers
    • Payment processing and financial service providers
    • Technology, hosting, and analytics service providers
    • Regulatory authorities or law enforcement agencies where required by law
    • Successor entities in the event of a merger, acquisition, or business transfer

    All third parties are contractually required to process personal data in compliance with the Data Protection Act and to implement appropriate safeguards.

    1. Cross-Border Transfers

    Where personal data is transferred outside Kenya, InfinityDiva ensures that such transfers comply with the Data Protection Act and that appropriate safeguards are in place to provide a level of protection comparable to that under Kenyan law.

    1. Data Retention

    Personal data is retained only for as long as is reasonably necessary for the purposes for which it was collected, including:

    • The duration of the customer relationship
    • Compliance with statutory and regulatory requirements
    • Resolution of disputes and enforcement of legal rights

    Once retention is no longer justified, personal data is securely deleted or anonymised.

    1. Data Security Measures

    InfinityDiva implements appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. Access is restricted to authorised personnel on a need-to-know basis.

    In the event of a personal data breach, InfinityDiva will assess the risk and notify affected data subjects and the Office of the Data Protection Commissioner where required by law.

    1. Rights of Data Subjects

    In accordance with the Data Protection Act, data subjects have the right to:

    • Be informed about the use of their personal data
    • Access personal data held by InfinityDiva
    • Object to the processing of personal data
    • Request correction of false or misleading data
    • Request deletion of personal data where lawful
    • Withdraw consent at any time without penalty

    Requests may be declined where permitted by law, including where identity verification is insufficient or where compliance would be unlawful.

    1. Complaints and Contact Details

    For enquiries, complaints, or requests relating to personal data, you may contact InfinityDiva at:

    Email: support@infinitydiva.co.ke

    Data subjects also have the right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya) if they believe their rights have been infringed.

    1. Related Policies

     

Brands Carousel