Privacy Policy

1. Data Controller

Napkin Silk Cellar
Jomo Kenyatta Avenue 64, Mombasa, Mombasa, 80110
Email: [email protected]
Tel: +254 41 232 4487

2. Legal Framework

The processing of personal data is carried out in accordance with applicable data protection legislation.

3. Data We Collect

• Full name
• Email address
• Phone number
• Physical address
• Service history and preferences

4. Purpose of Processing

• Appointment booking and service delivery
• Customer communication and support
• Sending appointment reminders
• Improving our services
• Compliance with legal obligations

5. Cookie Policy

Type	Name	Purpose	Duration
Essential	ck_consent	Stores cookie consent preference	1 year
Functional	session_id	Maintains your session	Session
Analytics	_ga	Google Analytics usage tracking	2 years

6. Data Sharing

We do not sell your data to third parties. We only share data with technical service providers under confidentiality agreements and with authorities when required by law.

7. Retention Period

We retain data for as long as necessary to provide our services and to comply with our legal obligations.

8. Your Rights

• Access: Know what data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data where applicable

9. Children's Privacy

We do not knowingly collect data from children under 16 without parental consent.

10. Security

We implement technical and organizational measures to protect your data including SSL encryption, restricted access and regular backups.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated by email or via a notice on the site.

12. Contact for Privacy Matters

For privacy inquiries, contact us at the email or address listed in Section 1. We aim to respond to all inquiries within 30 days.

13. Legal Basis for Processing

Personal data is processed under the Data Protection Act, 2019, on the basis of your consent when you send an enquiry, and on the basis of contract where a service agreement is in place. Consent may be withdrawn at any time.

14. Data Retention

Enquiry records are kept for the period needed to respond and to keep an audit trail of the quotation. Service records tied to an agreement are kept for the duration of that agreement and the statutory period that follows it.

15. Complaints and Supervision

Questions about how your data is handled should reach us first at the address on this site. You also have the right to raise the matter with the Office of the Data Protection Commissioner.