Privacy Policy & Cookies
Updated February 12, 2023
Privacy Policy
UndaMeta (“UndaMeta“, “we” or “us“) is committed to respecting your privacy and complying with applicable laws and regulations to ensure that the personal information you give us is kept appropriately secure and processed fairly and lawfully.
1. Introduction
UndaMeta is a private limited liability company incorporated in the Republic of Kenya. UndaMeta’s registered office is near the Waterfront Mall, Karen Road and of P.O Box 14275 00800, Westlands, Nairobi.
Your personal information will be held and managed by UndaMeta. By visiting and using UndaMeta’s website or mobile site (www.undameta.com) (the “Site“) or any UndaMeta application (“Application“) that we make available from time to time, you acknowledge that you have read this Policy.
All personal information collected from you by UndaMeta pertaining to the sale of tangible and intangible products shall be used in the Site and on Applications developed by UndaMeta to enable its operations and that of approved third-party websites and software as necessary.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
This Policy should be read together with UndaMeta’s Terms and Conditions of Use (the “Terms and Conditions“). Where there is a conflict, this Policy will prevail. This Policy applies to all customers, bidders, sellers or dealer
2. Collection of information
We collect your personal information with your knowledge and consent when you do any of the following:
- register an account with us;
- place an order;
- when you interact with our digital content on your computer or mobile device;
- send us an enquiry;
- through authentication or identity checks when you make a purchase on the Site; and
- when you create posts, like us, mention us or interact with our pages on social media platforms.
We will also receive personal data about you from various third parties and public sources.
3. What information is collected?
The information we collect and store about you includes but is not limited to the following:
- your name;
- your postal address;
- your phone numbers;
- your e-mail addresses;
- information relating to your credit card, debit card, and/or other payment information to process payments in connection with your orders; and
- information about the products you browse online or purchase when you have a customer or supplier account.
4. Use of information
We may use and analyse your information for the following purposes:
- to identify you as a customer;
- to process your order;
- to deliver products and services;
- to process payments;
- to update our records;
- to manage your account with us;
- to assist you on prospective purchases on the Site;
- to request and respond to feedback relating to UndaMeta;
- to contact you in relation to service-related matters, including aftercare services;
- to request and respond to feedback relating to UndaMeta’s brand, product, services and your experience when using UndaMeta;
- to provide relevant content via our social media platforms about our products, events and promotions;
- to offer an enhanced service according to your preferences when using the Site such as identifying relevant products, services, and events which may be of interest to you, personalizing your experience with UndaMeta and sharing with you information about your past purchases.
We will obtain your consent to use your personal information for purposes not stated in the Policy.
5. Managing and deleting your information
- We store information until it is no longer necessary to provide our services, or until your account is deleted, whichever comes first.
- We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
- We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
- To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data.
6. Disclosure of information
Any disclosure of your information shall be in accordance with the applicable law and regulations. UndaMeta shall assess and review each application for information and may decline to grant such information to the requesting party.
We may disclose your information to:
- law-enforcement agencies, regulatory authorities, courts or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand is compliant with the law;
- our subsidiaries, partners and software developers who are involved in delivering the services that you use;
- fraud prevention and anti-money laundering agencies;
- survey agencies that conduct surveys on behalf of UndaMeta;
- third parties to whom we may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Policy; and
- any other person that we deem legitimately necessary to share the data with.
We shall not release any information to any individual or entity that is acting beyond its legal mandate.
7. Safeguarding and protection of information
- UndaMeta maintains reasonable and appropriate security measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
- We have put in place procedures to deal with any suspected personal data breach and will notify you or any applicable regulator, including the Data Commissioner, of a breach where we are legally required to do so.
- We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
- We will try to respond to all legitimate requests within reasonable time. Occasionally it could take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
8. Direct marketing
- You may be required to opt-in or give any other form of explicit consent before receiving marketing messages from us.
- You can ask us to stop sending you marketing messages at any time by writing to us or contacting us at any time through the provided contacts.
- Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product, service already taken up, warranty registration, product or service experience or other transactions.
- We will get your express consent before we share your personal data with any third party for direct marketing purposes.
9. Your right
Subject to legal and contractual exceptions, you have rights under data protection laws in relation to your personal data. These are listed below:
- right to be informed that we are collecting personal data about you;
- right to access personal data that we hold about you and request for information about how we process it;
- right to request that we correct your personal data where it is inaccurate or incomplete;
- right to request that we erase your personal data noting that we may continue to retain your information if obligated by the law or entitled to do so;
- right to object and withdraw your consent to processing of your personal data. We may continue to process if we have a legitimate or legal reason to do so;
- right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and refuse your request;
- right to request transfer of your personal data to you or a third party;
- right to have the data processed in accordance with the right to privacy;
- right to have the data processed in a lawful, fair and transparent manner;
- right to have the data collected for explicit, specified and legitimate purposes and not further processed in a manner incompatible with those purposes; and
- right to the data for no longer than is necessary for the purposes which it was collected.
10. Right to lodge a complaint
You have the right to lodge a complaint with the relevant supervisory authority, including the Data Commissioner, for resolution. However, you are encouraged to raise your complaint directly with UndaMeta and provide us the opportunity to resolve the issue before raising a complaint with the relevant regulatory authority.
11. Non-compliance with this policy
UndaMeta shall have the right to terminate any agreement with you for failure to comply with the provisions of this Policy and reject any application for information contrary to this Policy.
12. Amendments to this policy
We keep this Policy under regular review. In case the Policy is amended, you will be notified by email or SMS (Short Message Service) or when you next visit the Site and will have the right to review the revised Policy before you choose to continue using our services or products.
13. How to contact us
If you would like to contact us on any topics in this Policy, you can contact us at info@undameta.com or submit a request via our digital platforms.
Cookies
Cookies are small text files that are sent to or accessed from your web browser or your device’s memory. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the “lifetime” of the cookie (i.e. when it expires) and a randomly generated unique number or another identifier. We also use similar technologies (which are also called cookies for the purposes of this policy) such as web beacons (also called pixel tags or clear gifs), tracking URLs, and local storage on the Site and Applications. A cookie will allow us to collect information about your device, such as user settings, browsing history and activities conducted while using the Site and Applications. By linking the information in these cookies with other customer information that you provide to us, for example, when you log in to the Site or Application, we may be able to identify the cookie information that relates to you. Most web browsers are initially set up to accept cookies. You can reset your web browser to refuse cookies or to indicate when a cookie is being sent, however, certain features of our Site or Application may not work if you delete or disable cookies. Some of our Service Partners (discussed below) may use their own cookies, anonymous identifiers, or other tracking technology in connection with the services they perform on our behalf. We shall inform you where relevant of our use of cookies on arriving at our Site, Application or, if required by applicable laws. You acknowledge and agree that by continuing to use our Site or Application or services without managing your cookie and device choices and preferences, that you consent to our cookie settings and agree that you understand the same.
Advertising and online tracking
We may allow third-party companies to serve ads and collect certain anonymous information when you visit our Site. These companies use information (e.g. click stream information, web browser type, time and date, subject of advertisements clicked or scrolled over) collected during your visits to the Site and other websites, and may use other similar identifying information and/or contact information (where lawfully permitted to do so) in order to provide advertisements about goods and services likely to be of interest to you. These companies typically use a cookie to collect this information and will use identifiers in order to recognise a user (including linking them across different devices and browsers) and to more effectively measure and provide targeted advertisements).
Communications and interactions with UndaMeta
If you contact UndaMeta by email or phone, UndaMeta will collect your personal information and use this information to identify you as a customer, help with your query, process your order/reservation, deliver products and services, process payments, update our records and to generally manage your account with us under our terms with you. UndaMeta may also use information, including our chat history with you, to better understand the interests and preferences of our customer audiences. We may also obtain personal information where you “like” us, create posts, mention us in public posts or otherwise interact with our pages on social media platforms and may in response, use this information to communicate with you, to provide relevant content via those social media platforms about our products, events and promotions where permitted to do so in accordance with applicable laws. We may also analyse public social media posts (including where you mention us and/or interact with our content in public posts) as part of our internal marketing analysis and demographic studies, in order to better understand and monitor trends and patterns so we can improve our products and services and understand what may be of interest to you and others. Please refer to the Privacy Policies of the social media platforms for information about how they collect and use your personal information.