Privacy Policy – SF Duka

SF Duka is committed to protecting your personal information. We process all personal data carefully, transparently, and in compliance with Kenya’s Data Protection Act (2019) and other applicable privacy regulations.

Article 1 – Definitions

Data Subject: A natural person whose personal data is processed. In this policy, referred to as the “Customer.”

Personal Data: Any information that identifies a Data Subject, such as name, address, email, phone number, payment information, or images.

Processing: Any operation carried out on personal data, including collection, storage, use, or deletion.

Controller: SF Duka, which determines the purposes and means of processing personal data.

Article 2 – Scope and Collection of Data

This privacy policy applies to all personal data processed by SF Duka in relation to:

Booking and attending our DIY workshops or events.
Purchasing gift cards, products, or services through our website.
Subscribing to newsletters, promotions, or contacting us directly.

We collect personal data when you:

Book a workshop or purchase a gift card online.
Communicate with us via email, phone, WhatsApp, or social media.
Subscribe to our newsletters or mailing lists.
Visit our website (through cookies and analytics).

Article 3 – Handling of Data

Personal data is processed lawfully, fairly, and for legitimate purposes.
Data is kept confidential and is only accessible to authorized SF Duka staff and trusted partners.
If a Customer notices their data is inaccurate, they may request correction or deletion at any time.

Article 4 – Purposes of Data

SF Duka processes personal data for:

Managing bookings and attendance at workshops and events.
Sending confirmations, updates, or reminders about bookings.
Processing payments and issuing receipts.
Customer support and responding to inquiries.
Marketing, newsletters, and promotions (if the Customer opts in).
Legal or regulatory compliance.

Personal data will never be sold to third parties.

Article 5 – Storage of Data and Retention Periods

Personal data is stored only as long as necessary to fulfill the purpose for which it was collected.
Booking and payment data may be retained for up to 7 years for accounting and tax compliance.
Newsletter and marketing subscription data is retained until the Customer unsubscribes.
Customers may request deletion of their data at any time, except where retention is legally required.

Article 6 – Data Security

SF Duka takes appropriate technical and organizational measures to secure personal data.

All payments are processed securely through trusted third-party payment providers.
Access to personal data is restricted to authorized staff.
Measures are in place to prevent unauthorized access, loss, misuse, or disclosure.

Article 7 – Rights of the Customer

Customers have the right to:

Access their personal data held by SF Duka.
Request correction or deletion of their data.
Withdraw consent to data processing (without affecting the legality of prior processing).
Object to receiving marketing communications.
File a complaint with Kenya’s Data Protection Commissioner if they believe their rights are being violated.

Article 8 – Sharing of Data with Third Parties

Personal data may only be shared with third parties when:

Necessary for booking and payment processing.
Required by law or regulatory authorities.
With trusted service providers (such as payment processors, email providers, or website hosts) under strict confidentiality agreements.

Article 9 – Newsletters and Marketing

Customers may opt in to receive newsletters, offers, and event updates.
Newsletters are sent via email.
Customers may unsubscribe at any time by clicking the “unsubscribe” link in the email or contacting SF Duka directly.

Article 10 – Cookies and Website Use

SF Duka’s website uses cookies and analytics tools to improve browsing and track usage patterns.
Cookies may collect information about browsing behavior but do not identify individuals personally.
Customers can disable cookies in their browser settings, though this may affect website functionality.

Article 11 – Contact and Complaints

For questions, corrections, or complaints about how your personal data is processed, please contact:

Email: info@sfduka.com or studiofacelift@gmail.com
Phone/WhatsApp: +254 707 680 647
Address: [Mombasa Rd (Athi River), Nairobi, Kenya]

Complaints may also be submitted to the Office of the Data Protection Commissioner (ODPC) in Kenya.

Article 12 – Changes to the Privacy Policy

SF Duka reserves the right to amend this Privacy Policy at any time. Updates will be posted on our website, and continued use of our services after changes indicates acceptance of the updated terms.

Article 13 – Governing Law

This Privacy Policy is governed by the laws of Kenya. Any disputes will be subject to Kenyan jurisdiction.

Stay Connected