Privacy Policy

Effective Date: Feb 2026
Last Updated: Feb 2026

Introduction

Sabora Canvas (“we,” “our,” or “us”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [www.saboracanvas.co.ke] or [www.saboracanvas.com] (the “Website”), make purchases, or interact with our services.

By accessing or using our Website, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Website or services.

This policy applies to all visitors, customers, and users of our Website and services, regardless of location.

Information We Collect

We collect information in several ways when you interact with our Website and services.

2.1 Information You Provide Directly

When you voluntarily provide information to us, we may collect:

Account Information

  • Full name
  • Email address
  • Phone number
  • Password (encrypted)
  • Username

Billing and Shipping Information

  • Billing address
  • Shipping address
  • Company name (if applicable)

Payment Information

  • Payment method details
  • M-Pesa phone number
  • Transaction references

Note: We do not store complete credit card numbers or CVV codes. Payment processing is handled by secure third-party payment processors.

Order Information

  • Products purchased
  • Order history
  • Custom order specifications
  • Communication regarding orders

Communication Information

  • Emails and messages you send us
  • Customer service inquiries
  • Feedback and reviews
  • Survey responses

Custom Order Information

  • Vehicle specifications for custom fittings
  • Measurements and dimensions
  • Design preferences and requirements

2.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information:

Device and Browser Information

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution

Usage Information

  • Pages visited
  • Time spent on pages
  • Links clicked
  • Referring website
  • Date and time of visits

Location Information

  • General geographic location based on IP address
  • Country and city (approximate)

2.3 Information from Cookies and Similar Technologies

We use cookies, pixels, and similar tracking technologies to collect information about your browsing activities. See Section 8 for detailed information about our cookie practices.

2.4 Information from Third Parties

We may receive information about you from third parties, including:

  • Payment processors (transaction confirmations)
  • Shipping carriers (delivery status)
  • Marketing partners (with your consent)
  • Social media platforms (if you interact with us through those channels)

How We Use Your Information

We use the information we collect for the following purposes:

3.1 Order Fulfillment and Services

  • Processing and fulfilling your orders
  • Shipping products to your specified address
  • Managing custom and bespoke orders
  • Providing customer support
  • Handling returns, exchanges, and refunds
  • Communicating order status and updates

3.2 Account Management

  • Creating and managing your account
  • Authenticating your identity
  • Maintaining your order history
  • Storing your preferences

3.3 Communication

  • Responding to your inquiries and requests
  • Sending order confirmations and shipping notifications
  • Providing customer service support
  • Sending important notices about our services

3.4 Marketing and Promotions (With Consent)

  • Sending promotional emails and newsletters
  • Informing you about new products and collections
  • Sharing special offers and discounts
  • Providing personalised product recommendations

You may opt out of marketing communications at any time.

3.5 Website Improvement

  • Analysing website usage and performance
  • Improving website functionality and user experience
  • Identifying and fixing technical issues
  • Conducting research and analytics

3.6 Security and Fraud Prevention

  • Protecting against fraudulent transactions
  • Detecting and preventing security threats
  • Verifying identity for account access
  • Complying with legal obligations

3.7 Legal Compliance

  • Complying with applicable laws and regulations
  • Responding to legal requests and court orders
  • Enforcing our terms and conditions
  • Protecting our legal rights and interests

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Contractual Necessity
Processing necessary to fulfill our contract with you, including order fulfillment, shipping, and customer service.

Legitimate Interests
Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and marketing (where not overridden by your rights).

Consent
Processing based on your explicit consent, such as marketing communications and certain cookies. You may withdraw consent at any time.

Legal Obligation
Processing necessary to comply with applicable laws, including tax regulations and consumer protection laws.

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

Payment Processors

  • M-Pesa / Safaricom
  • Card payment processors

These providers process payment information securely and are bound by strict data protection obligations.

Shipping and Logistics

  • Courier services
  • Delivery partners
  • Shipping carriers

We share shipping addresses and contact information necessary to deliver your orders.

Website and Technology

  • Web hosting providers
  • Email service providers
  • Analytics services
  • Customer support platforms

Marketing Services (With Consent)

  • Email marketing platforms
  • Advertising partners

5.2 Business Partners

For custom orders involving installation (such as vehicle seat covers or tents), we may share relevant order details with installation partners with your consent if applicable.

5.3 Legal Requirements

We may disclose your information when required by law or in response to:

  • Court orders or subpoenas
  • Government or regulatory requests
  • Legal proceedings
  • Law enforcement requests

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and your options regarding your information.

5.5 Protection of Rights

We may disclose information to protect:

  • Our legal rights and property
  • The safety of our customers and the public
  • Against fraud or security threats

5.6 With Your Consent

We may share your information for other purposes with your explicit consent.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

6.1 Retention Periods

Account Information
Retained while your account is active and for 3 years after account closure.

Order Information
Retained for 7 years for tax and legal compliance purposes.

Payment Records
Retained for 7 years as required by Kenyan tax regulations.

Marketing Data
Retained until you unsubscribe or withdraw consent.

Website Analytics
Retained for 26 months.

Customer Service Communications
Retained for 3 years after the last interaction.

6.2 Deletion

When information is no longer required, we securely delete or anonymise it. You may request deletion of your information subject to our legal retention obligations.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

7.1 Security Measures

Technical Safeguards

  • SSL/TLS encryption for data transmission
  • Secure payment processing (PCI-DSS compliant processors)
  • Encrypted password storage
  • Regular security updates and patches
  • Firewall protection

Organisational Safeguards

  • Limited access to personal information
  • Staff training on data protection
  • Confidentiality agreements
  • Regular security assessments

Physical Safeguards

  • Secure facilities
  • Access controls
  • Secure disposal of physical records

7.2 Limitations

While we implement robust security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

7.3 Breach Notification

In the event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable laws and take appropriate steps to mitigate any harm.

Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our Website. They help us recognise your device and remember your preferences.

8.2 Types of Cookies We Use

Strictly Necessary Cookies
Essential for the Website to function properly. These cannot be disabled.

  • Shopping cart functionality
  • User authentication
  • Security features

Performance and Analytics Cookies
Help us understand how visitors use our Website.

  • Google Analytics
  • Page view tracking
  • Error monitoring

Functionality Cookies
Remember your preferences and settings.

  • Language preferences
  • Recently viewed products
  • Saved addresses

Marketing Cookies (With Consent)
Used to deliver relevant advertisements.

  • Retargeting cookies
  • Social media cookies
  • Advertising platform cookies

8.3 Third-Party Cookies

Our Website may contain cookies from third-party services:

  • Google Analytics (analytics)
  • Facebook Pixel (marketing, with consent)
  • Payment processors (transaction security)

These third parties have their own privacy policies governing their use of cookies.

8.4 Managing Cookies

You can manage cookie preferences through:

Browser Settings
Most browsers allow you to block or delete cookies through settings.

Cookie Consent Banner
When you first visit our Website, you can select which cookie categories to accept.

Opt-Out Links

Note: Disabling certain cookies may affect Website functionality.

8.5 Do Not Track

Our Website does not currently respond to “Do Not Track” browser signals. However, you can manage your preferences through the methods described above.

Your Privacy Rights

You have certain rights regarding your personal information. To exercise these rights, contact us using the information in Section 13.

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

9.3 Right to Erasure

You have the right to request deletion of your personal information, subject to certain exceptions (such as legal retention requirements).

9.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain circumstances.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format.

9.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

9.8 Exercising Your Rights

To exercise any of these rights:

  • Email us at info@saboracanvas.co.ke
  • Include your full name and order details for verification
  • Specify which right you wish to exercise

We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

9.9 Complaints

If you believe your privacy rights have been violated, you may lodge a complaint with the relevant data protection authority.

International Data Transfers

Sabora Canvas is based in Nairobi, Kenya. Your information may be processed and stored in Kenya.

If you are accessing our Website from outside Kenya, please be aware that your information may be transferred to, stored, and processed in Kenya where our servers are located.

10.1 Safeguards for International Transfers

When we transfer personal information internationally, we ensure appropriate safeguards are in place:

  • Standard contractual clauses
  • Data processing agreements with service providers
  • Compliance with applicable data protection laws

10.2 European Union Users

If you are located in the European Economic Area (EEA), we process your personal information in compliance with the General Data Protection Regulation (GDPR). Data transfers outside the EEA are conducted with appropriate safeguards.

Third-Party Links and Services

Our Website may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services.

We encourage you to review the privacy policies of any third-party services before providing personal information.

We are not responsible for the privacy practices of third-party websites or services.

Children’s Privacy

Our Website and services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@saboracanvas.co.ke. We will take steps to delete such information from our systems.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Sabora Canvas

Email: info@saboracanvas.co.ke

Phone: (+254) 0732 848469

Address:
Sabora Canvas
Karen Park
Opposite St. Christopher’s International School
Nairobi, Kenya

Business Hours:
Monday to Friday: 8:00 AM to 5:00 PM
Saturday: 9:00 AM to 3:00 PM

Response Time
We aim to respond to all privacy-related inquiries within 30 days.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

14.1 Notification of Changes

When we make material changes to this policy, we will:

  • Update the “Last Updated” date at the top of this page
  • Post a notice on our Website
  • Send an email notification to registered users (for significant changes)

14.2 Review

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14.3 Continued Use

Your continued use of our Website and services after changes are posted constitutes your acceptance of the updated Privacy Policy.

Additional Information for Specific Jurisdictions

15.1 Kenya

This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019. We are committed to compliance with Kenyan data protection requirements.

15.2 European Union

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

15.3 South Africa

If you are located in South Africa, your personal information is processed in accordance with the Protection of Personal Information Act (POPIA).

15.4 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate or serve customers.

Definitions

Personal Information: Any information that identifies or can be used to identify an individual, directly or indirectly.

Processing: Any operation performed on personal information, including collection, storage, use, disclosure, and deletion.

Data Controller: Sabora Canvas, the entity that determines the purposes and means of processing personal information.

Data Processor: A third party that processes personal information on behalf of Sabora Canvas.

Cookies: Small text files stored on your device that help us improve your experience on our Website.

Summary

Information Type Purpose Retention Shared With
Account details Account management, orders Active account + 3 years Service providers
Order information Fulfillment, customer service 7 years Payment, shipping partners
Payment data Transaction processing 7 years Payment processors
Usage data Analytics, improvement 26 months Analytics providers
Marketing data Promotions (with consent) Until unsubscribe Marketing platforms

 

Thank you for trusting Sabora Canvas with your personal information. We are committed to protecting your privacy and providing you with quality products and services.