1. Introduction

Alpha Electricals & Plumbing Ltd (“we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you interact with our eCommerce platform, mobile applications, or related services (“Platform”).

By using our Platform, you consent to the practices described in this Policy.

2. Information We Collect

We may collect the following categories of personal and non-personal data:

a. Personal Information

• Full name
• Contact details (email, phone number, physical address)
• Account login details (username, password)
• Payment information (credit/debit card details, M-PESA, bank transfer data – securely processed via third parties)
• Identification documents (when required for verification, regulatory, or fraud-prevention purposes)

b. Non-Personal/Technical Information

• Browser type, device type, operating system
• IP address and geolocation data
• Website usage patterns and analytics
• Cookies and tracking identifiers (see Cookies Policy)

c. Transactional Information

• Order history, shopping cart activity
• Returns and refund requests
• Customer service interactions

3. How We Use Your Information

We use your information for the following purposes:

• Order Fulfillment – Processing, delivering, and confirming purchases.
• Customer Support – Handling inquiries, complaints, and after-sales services.
• Personalization – Recommending products and tailoring your shopping experience.
• Marketing & Promotions – Sending promotional offers, newsletters, and targeted advertisements (where you consent).
• Security & Fraud Prevention – Detecting unauthorized access, ensuring secure transactions, and complying with anti-fraud laws.
• Legal & Compliance – Meeting regulatory requirements, tax obligations, and lawful government requests.

4. Legal Basis for Processing (For GDPR Compliance)

We process your personal data under the following lawful bases:

• Consent – When you opt-in to marketing communications.
• Contractual necessity – To fulfill your purchase orders and provide requested services.
• Legal obligation – To comply with applicable laws.
• Legitimate interests – For improving services, customer satisfaction, and fraud prevention.

5. Sharing of Information

We do not sell your personal data. However, we may share your information with:

• Service Providers – Payment gateways, delivery partners, IT and customer service providers.
• Business Partners – Vendors, suppliers, or affiliates who help fulfill your orders.
• Legal Authorities – When required by law, regulation, or court order.
• Corporate Transactions – In case of a merger, acquisition, or business restructuring.

All third parties are required to respect your data privacy and process it in accordance with applicable laws.

6. International Data Transfers

Your information may be transferred and stored outside your home country, including to jurisdictions that may not provide the same level of data protection. In such cases, we implement safeguards (e.g., contractual clauses, encryption) to protect your data.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Policy, or as required by law. Once no longer needed, your data will be securely deleted or anonymized.

8. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA, Kenya DPA), you may have the following rights:

• Right to access your data
• Right to rectification (correct inaccuracies)
• Right to deletion (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to direct marketing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

You can exercise these rights by contacting us at Alphaltd21@gmail.com.

9. Security of Your Information

We employ technical and organizational measures to protect your personal data, including:

• SSL encryption for data transfers
• PCI DSS compliance for payment processing
• Firewalls, access controls, and monitoring systems
• Regular audits and staff training on data protection

However, no system is 100% secure. You are encouraged to protect your login details and notify us of any suspected breach.

10. Children’s Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from minors. If we discover we have collected data from a child, it will be deleted immediately.

11. Marketing Communications

With your consent, we may send promotional offers via email, SMS, or push notifications. You can opt out at any time by clicking the “unsubscribe” link or adjusting your account settings.

12. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies before providing personal data.

13. Updates to This Privacy Policy

We may update this Policy from time to time. Updates will be posted on this page with a new “Effective Date.” Continued use of our Platform after updates indicates your acceptance of the revised Policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: