This Privacy Policy explains how Enzi Packaging ("Enzi Packaging", "we", "us", or "our"), operating from Dynamic Mall Suite ML135, Nairobi, Kenya, collects, uses, stores, shares, and protects personal data when you visit our website, place retail or wholesale packaging orders, request quotations, communicate with our sales team, or otherwise interact with our e-commerce and business services in Kenya and, where applicable, across East Africa.

Enzi Packaging supplies corrugated boxes, polythene bags, branded packaging, food-grade containers, industrial wrapping materials, and related packaging solutions to individuals, retailers, restaurants, manufacturers, and corporate buyers. Because our business involves order fulfilment, delivery logistics, invoicing, and account management, we process personal data that is necessary to perform contracts, comply with Kenyan law, and provide reliable customer service.

This policy applies to all channels through which you engage with us, including our website, telephone enquiries at +254 1100-50620, email correspondence at info@enzipackaging.co.ke, in-person visits to our Nairobi showroom, social media messaging, and third-party marketplaces where we list packaging products. It covers customers, prospective buyers, wholesale account holders, delivery recipients, suppliers, and website visitors.

By using our services or submitting personal information, you acknowledge that you have read this Privacy Policy. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. If you do not agree with this policy, please refrain from using our website or providing personal data, and contact us to discuss alternative arrangements where possible.

We may update this Privacy Policy to reflect changes in law, technology, or business practices. Material changes will be communicated through our website or direct notice where appropriate. The effective date at the top of the published document indicates the version currently in force.

For the purposes of the Kenya Data Protection Act, 2019 ("the Act"), and applicable regulations issued by the Office of the Data Protection Commissioner ("ODPC"), Enzi Packaging is the data controller responsible for determining the purposes and means of processing personal data described in this Privacy Policy, unless we expressly state that another entity acts as a joint controller or processor for a specific activity.

Our registered business address is Dynamic Mall Suite ML135, Nairobi, Kenya. You may contact us regarding privacy matters by email at info@enzipackaging.co.ke, by telephone at +254 1100-50620, or by written correspondence delivered to our Nairobi office during normal business hours. We aim to acknowledge privacy enquiries within five business days and to provide substantive responses within the timelines prescribed by the Act where applicable.

Where we appoint a data protection contact or officer, their details will be published on our website or provided upon request. This contact serves as your primary point of communication for access requests, complaints, consent withdrawals, and questions about how we handle personal data in connection with packaging orders, wholesale accounts, deliveries, and marketing communications.

If you interact with us on behalf of a company or organisation, you represent that you have authority to provide organisational data and to receive privacy notices on its behalf. Organisational buyers, including wholesale clients placing bulk packaging orders, should ensure that their own privacy policies inform employees and agents whose data may be shared with Enzi Packaging for order processing and account administration.

We do not intentionally target children under eighteen years of age for marketing. If you believe we have collected personal data from a minor without appropriate consent, please contact us immediately so that we can investigate and take corrective action in line with the Act and our internal procedures.

We collect personal data that you provide directly, data generated through your use of our services, and limited data from third parties where lawful and necessary. Directly provided data may include your full name, company name, job title, billing and delivery addresses across Kenya, telephone numbers, email addresses, tax or PIN details for invoicing, purchase order references, product specifications, branding artwork, and messages you send via contact forms or WhatsApp business channels.

When you place retail or wholesale packaging orders, we collect transaction details such as items ordered, quantities, unit prices, discounts applied, payment method selected (including M-Pesa, bank transfer, or card payments processed by our payment partners), delivery preferences, and special instructions for fragile or customised packaging products.

We may collect technical data when you browse our website, including IP address, browser type, device identifiers, pages viewed, referral URLs, session duration, and cookie identifiers. This information helps us maintain website security, improve product discovery for packaging categories, and understand how customers navigate between retail and bulk order pathways.

For wholesale and corporate accounts, we may additionally collect trade references, credit application information, signed agreements, delivery schedules for recurring packaging supply, and records of account managers assigned to your business. We collect only data that is adequate, relevant, and limited to what is necessary for stated purposes, consistent with data minimisation principles under the Kenya Data Protection Act.

Sensitive personal data is not routinely required to purchase standard packaging products. If processing of sensitive categories becomes necessary for a specific lawful purpose, we will inform you, identify the applicable legal basis, and implement additional safeguards before such processing occurs.

We collect personal data through multiple interaction points aligned with our packaging e-commerce and B2B operations. Online collection occurs when you create an account, submit a quote request for custom printed boxes or branded bags, complete checkout, subscribe to stock alerts, upload design files, or participate in surveys about packaging preferences and delivery experience.

Offline collection occurs when you visit our Dynamic Mall premises, call +254 1100-50620, email info@enzipackaging.co.ke, meet our sales representatives at trade events, or sign delivery notes upon receipt of packaging consignments. Our staff record contact and order details in our customer relationship and order management systems to ensure accurate fulfilment and after-sales support.

We may receive data from payment service providers confirming M-Pesa transaction codes, settlement status, or failed payment notifications. Courier and logistics partners may provide delivery confirmation, recipient names, GPS coordinates for proof of delivery, or reports of failed delivery attempts for bulk shipments to warehouses and retail outlets.

Where permitted by law, we may obtain business contact information from publicly available directories, referrals from existing wholesale clients, or partner introductions. We do not purchase personal data lists for indiscriminate marketing. Any third-party sourced data is verified for accuracy and processed only where a lawful basis exists under the Kenya Data Protection Act.

Automated collection through cookies, pixels, and server logs is described in our cookies section. You can manage certain preferences through browser settings and, where available, our cookie consent tools. Refusing non-essential cookies may limit personalisation but will not prevent you from placing orders by contacting us directly.

Our website uses cookies and similar technologies to enable core functionality, remember preferences, analyse traffic, and support marketing measurement. Cookies are small text files stored on your device. Some cookies are session-based and expire when you close your browser; others persist for a defined period to recognise returning visitors interested in packaging categories such as food-grade containers or e-commerce mailers.

Strictly necessary cookies support secure login, shopping cart persistence for multi-item packaging orders, checkout processing, and fraud prevention. These cookies do not require consent under typical interpretations of Kenyan and international privacy guidance because they are essential to provide services you request.

Analytics cookies help us understand how users navigate product pages, whether wholesale enquiry forms are completed, and which packaging guides generate engagement. We use aggregated statistics to improve site structure, reduce page load times, and prioritise content for Nairobi customers seeking same-day collection or nationwide delivery options.

Marketing cookies may record that you viewed specific product lines, such as biodegradable packaging or industrial stretch film, to deliver relevant advertisements on third-party platforms. Where required, we request your consent before placing non-essential cookies. You may withdraw consent at any time through our cookie banner or browser controls.

We maintain a cookie inventory describing names, purposes, durations, and providers. Third-party cookies from payment gateways, embedded maps showing our Dynamic Mall location, or social media plugins may apply their own policies. We encourage you to review those policies and configure your browser to block or delete cookies if you prefer.

We process personal data for clearly defined purposes connected to our packaging business. Primary purposes include processing and fulfilling orders, preparing quotations for custom packaging runs, arranging delivery or customer collection from our Nairobi suite, managing wholesale credit terms where approved, issuing invoices and receipts, and providing post-sale support for defective or short-shipped consignments.

We use contact details to communicate order confirmations, production timelines for printed packaging, dispatch notifications with courier tracking links, delivery rescheduling, and responses to product availability enquiries. Communication may occur via email, SMS, phone calls, or WhatsApp where you have provided those channels and not opted out of service messages.

We process account and transaction history to recommend compatible packaging products, notify wholesale clients of volume pricing tiers, manage repeat supply contracts, and prevent duplicate or fraudulent orders. Business analytics help us forecast demand for seasonal packaging, optimise inventory at our Nairobi facility, and plan promotions for M-Pesa checkout discounts where offered.

We process data to comply with legal obligations, including tax record retention, responding to lawful requests from regulators or courts, and cooperating with consumer protection authorities when disputes arise. We may process data to establish, exercise, or defend legal claims relating to unpaid invoices, damaged goods claims, or intellectual property in custom branding files you submit.

With your consent or where otherwise permitted, we send marketing about new packaging lines, sustainability initiatives, trade fair appearances, and bulk order campaigns. You may opt out of marketing at any time without affecting transactional communications necessary to complete purchases or honour refund and warranty processes.

Under the Kenya Data Protection Act, we must identify and document a lawful basis for each processing activity. The primary bases we rely upon are: performance of a contract, compliance with a legal obligation, legitimate interests pursued by Enzi Packaging or a third party, and consent where required for specific activities such as non-essential marketing cookies or promotional newsletters.

Contractual processing covers activities necessary to take steps at your request before entering a contract and to perform the contract itself. This includes registering your account, verifying delivery addresses in Nairobi or other counties, processing M-Pesa or bank payments, manufacturing or sourcing ordered packaging, dispatching goods, and handling returns under our Refund Policy.

Legal obligation processing includes maintaining records for Kenya Revenue Authority requirements, responding to ODPC inquiries, fulfilling product labelling or safety documentation duties where applicable, and retaining transaction evidence for consumer protection disputes. We do not use consent as a substitute for processing that is already required by law.

Legitimate interests include improving website security, preventing fraud in high-value wholesale orders, conducting proportionate business analytics, training staff on customer service quality, and direct marketing to existing business customers where interests are balanced against your rights. We conduct balancing tests and offer opt-out mechanisms where marketing is involved.

Where we rely on consent, it is obtained through clear affirmative action, such as ticking an unchecked marketing box or accepting optional cookies. Consent is recorded with timestamp and scope. You may withdraw consent without penalty by contacting info@enzipackaging.co.ke or using unsubscribe links. Withdrawal does not affect prior lawful processing.

Enzi Packaging is committed to full compliance with the Kenya Data Protection Act, 2019, its regulations, and guidance issued by the ODPC. We align our privacy programme with core principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

We register as a data controller or data processor where registration is required and maintain records of processing activities describing categories of data subjects, personal data types, recipients, retention periods, and security measures. Our staff receive training on handling customer information in order processing, delivery coordination, and wholesale account management environments.

We implement technical and organisational measures appropriate to the risk, including access controls, encrypted connections for online transactions, secure storage of payment references (without retaining full M-Pesa PINs or card CVV data), and procedures for reporting personal data breaches to the ODPC and affected individuals within statutory timelines where required.

We respect data subject rights under the Act, including rights of access, rectification, erasure, restriction, objection, and data portability where technically feasible. Requests are verified to prevent unauthorised disclosure of order histories or wholesale pricing. We respond within the period prescribed by law unless an extension is permitted and communicated to you.

Cross-border transfers of personal data occur only where permitted under the Act, such as to cloud service providers or courier systems with adequate safeguards, standard contractual clauses, or your explicit consent where appropriate. We assess transfer risks before engaging subprocessors that may store data outside Kenya.

When you purchase packaging products through our website or sales desk, we create order records linking your identity to product SKUs, quantities, pricing, discounts, VAT treatment, and fulfilment status. Checkout data includes delivery method selection (Nairobi same-day courier, nationwide parcel service, or customer collection at Dynamic Mall Suite ML135), preferred delivery windows, and instructions for large palletised wholesale shipments.

We retain order histories to facilitate reorders of standard box sizes, reproduce previous custom print runs subject to artwork retention policies, resolve billing discrepancies, and support warranty or refund claims under our Returns Policy. Transaction timestamps and payment references help us reconcile M-Pesa paybill or till transactions with bank statements and payment gateway reports.

For guest checkout, we collect the minimum data needed to fulfil and deliver your order and may offer account creation after purchase to simplify future packaging procurement. Guest data is retained according to our retention schedule and may be linked to a registered account if you later sign up using the same email or phone number.

Order data may be displayed in your online account dashboard, including invoices downloadable for business expense claims, delivery tracking numbers, and status updates from production for made-to-order branded packaging. Access to account dashboards is protected by authentication measures described in our security section.

We may use aggregated, anonymised order statistics for business reporting without identifying individuals. Such statistics inform inventory planning for high-demand products like courier flyers, pizza boxes, and polythene shopping bags while preserving individual privacy.

Kenyan customers frequently pay using M-Pesa and other mobile money services. When you select M-Pesa at checkout or pay via our paybill or till number, we collect the phone number used for payment initiation, transaction confirmation codes, amounts paid, and timestamps provided by Safaricom or our payment aggregator. We never request or store your M-Pesa PIN or other authentication secrets.

Card payments, bank transfers, and corporate cheques for wholesale packaging orders are processed through regulated payment partners. We receive confirmation of payment success or failure, partial payments, chargebacks, and reconciliation identifiers. Card data is tokenised or processed directly by PCI-compliant gateways; Enzi Packaging does not store full primary account numbers on our servers.

Payment data is used to release orders for production or dispatch, apply credit to wholesale accounts, issue refunds where eligible, and detect fraudulent transactions such as mismatched payer names on high-value custom print orders. We may share limited payment confirmation details with our finance team, auditors, and legal advisers under confidentiality obligations.

Failed or reversed M-Pesa transactions may result in order cancellation or suspension pending successful payment. We communicate promptly when payments are not verified within expected timeframes so you can retry or contact support at +254 1100-50620. Refund credits may be returned via the original payment method where practicable.

Records of payment transactions are retained for periods required by tax, accounting, and anti-fraud regulations. You may request copies of invoices and payment confirmations subject to identity verification. Questions about a specific M-Pesa deduction appearing as ENZI PACKAGING or similar should be directed to us with the transaction code for rapid lookup.

Packaging products vary in size and weight, from small mailer envelopes to bulk pallet loads. To deliver efficiently, we collect recipient names, phone numbers, delivery addresses including estate or building names, floor or suite numbers, landmarks common in Nairobi deliveries, and GPS pins where you share them via messaging apps for courier accuracy.

We share necessary delivery data with third-party couriers, rider networks, and freight partners bound by contractual confidentiality and data protection clauses. Couriers use this data solely to attempt delivery, obtain signatures or photo proof, and report exceptions such as inaccessible premises or refused receipt of wholesale cartons.

Real-time tracking links may display vehicle or rider location generated by courier systems. Enzi Packaging does not continuously track your personal device location except where you explicitly share live location for delivery coordination. Delivery records are stored to prove fulfilment in dispute scenarios covered by consumer protection law and our Refund Policy.

For customer collection at Dynamic Mall Suite ML135, we record collection times, authorised collector names for business pickups, and vehicle registration where required for loading bay management. CCTV on our premises may capture images during visits as described in our premises security section.

If delivery fails due to incorrect addresses supplied by the customer, we may charge redelivery fees for bulky packaging orders. We encourage wholesale clients to maintain accurate delivery master data and notify us of warehouse changes before scheduled dispatch dates.

Wholesale and corporate clients ordering packaging in volume receive dedicated account handling. We collect business registration details, KRA PIN, billing contacts, authorised signatories, credit application forms, bank references, and purchase order templates. This data supports credit assessments, contractual pricing, scheduled deliveries to multiple branches, and consolidated invoicing.

Account managers maintain notes on packaging specifications, approved artwork versions, minimum order quantities, and service level agreements for recurring supply of cartons, films, or food service disposables. These records help ensure consistency across production runs and reduce errors in custom die lines or print colours.

We may conduct site visits to large clients for packaging audits, requiring processing of contact details and access arrangements. Site visit reports are stored confidentially and used to recommend optimised packaging SKUs, cost savings, or sustainable material alternatives aligned with your operational needs.

Wholesale portals or email ordering channels log user IDs, IP addresses, and order submission timestamps for security and dispute resolution. Multiple users under one corporate account may be registered with role-based permissions where our systems support it, limiting access to pricing and order history appropriately.

Business account data is retained for the relationship duration and thereafter per legal and contractual requirements. Upon account closure, we anonymise or delete data not required for tax, litigation, or regulatory retention, subject to your valid erasure requests under the Kenya Data Protection Act.

With your consent or where permitted under legitimate interest rules for existing customers, we may send emails, SMS messages, or WhatsApp updates about new packaging products, bulk discounts, seasonal promotions, sustainability certifications, and participation in Nairobi trade exhibitions. Marketing content is clearly identifiable and includes unsubscribe or opt-out instructions.

We segment audiences to avoid irrelevant messaging, for example distinguishing restaurant buyers interested in food packaging from e-commerce sellers seeking mailers. Preference centres may allow you to select topics such as eco-friendly materials, custom printing, or industrial packaging only.

We do not sell your personal data to third-party marketers. We may use advertising platforms that process cookie or pixel data to show Enzi Packaging ads on external sites; such processing is governed by platform policies and our cookie disclosures. You can limit ad personalisation through platform settings and our consent tools.

Transactional messages, including order confirmations, dispatch alerts, payment receipts, and policy updates, are not marketing and cannot be opted out while maintaining an active order relationship. Service surveys following delivery may be sent to improve packaging quality and courier performance.

If you believe you received marketing without valid consent, contact info@enzipackaging.co.ke with details. We investigate promptly and suppress your contact details from promotional lists. Complaints may also be escalated to the ODPC if unresolved to your satisfaction.

When you contact us for help choosing box dimensions, reporting damaged cartons on arrival, requesting rush production, or disputing invoices, we create support tickets recording your enquiry, our responses, attachments such as photos of crushed packaging, call logs, and resolution outcomes. These records enable consistent follow-up even if different staff members assist you.

Support communications may be monitored for quality assurance and staff training, with access limited to authorised personnel. We advise against sharing unnecessary sensitive personal data in open email threads; use secure channels when transmitting confidential business information related to unreleased product packaging designs.

WhatsApp and social media messages initiated by you may be logged in our CRM with timestamps and agent notes. Please verify you are communicating with official Enzi Packaging channels listed on our website to avoid phishing attempts impersonating our +254 1100-50620 number or email domain.

We retain support records for periods sufficient to demonstrate how complaints were handled, particularly where Consumer Protection Act issues arise regarding defective goods, short quantities in wholesale shipments, or delayed refunds to M-Pesa wallets. Retention also supports continuous improvement of packaging QA processes.

You may request copies of correspondence relating to your data subject access request, subject to redactions protecting other individuals' privacy or confidential business information not pertaining to your orders.

We analyse website usage to improve discoverability of packaging categories, reduce checkout abandonment for bulk orders, and ensure mobile compatibility for customers ordering from smartphones using M-Pesa. Analytics tools may process IP addresses, device types, browser versions, page paths, click events, and approximate geographic location at city level.

Data is aggregated where possible to evaluate trends such as increased demand for biodegradable mailers or cold-chain packaging. Individual-level analytics may be used temporarily for debugging checkout errors or fraud investigation, with access restricted to technical staff under confidentiality duties.

We configure analytics retention settings to delete or anonymise data after defined periods consistent with our storage limitation principle. Where analytics providers act as data processors, we require contractual commitments to process data only on our instructions and implement appropriate security measures.

You may opt out of certain analytics through cookie consent choices or browser do-not-track signals where our systems honour such signals. Opting out does not affect essential logging needed for security incident investigation or server reliability monitoring.

Performance monitoring includes uptime checks and error logging that may incidentally capture IP addresses when server errors occur. These logs are not used for marketing and are rotated regularly unless preserved as evidence of cyber incidents.

We engage trusted third parties to support operations, including website hosting, email delivery, SMS gateways, payment aggregators, cloud storage for artwork files, ERP and inventory systems, courier marketplaces, accounting software, and IT support. These processors handle personal data only on documented instructions from Enzi Packaging.

Processor agreements include confidentiality, security, subprocessor approval mechanisms, breach notification duties, and deletion or return of data upon contract termination. We assess processors' compliance with the Kenya Data Protection Act before engagement and periodically thereafter, especially where they process large volumes of customer order data.

Examples include sharing delivery addresses with courier partners, sharing payment confirmation tokens with M-Pesa integrators, and sharing email addresses with newsletter platforms for consented marketing. We do not authorise processors to use your data for their independent marketing purposes.

If a processor fails to meet contractual obligations, we investigate, suspend processing where necessary, and notify affected individuals and regulators if a breach poses risk to rights and freedoms. A list of major processor categories is available on request to info@enzipackaging.co.ke.

Some providers may be located outside Kenya. Transfers are governed by our cross-border transfer section and permitted safeguards under the Act.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Third-Party Processors and Service Providers should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Timely delivery of packaging products requires sharing recipient contact details, addresses, package dimensions, weights, cash-on-delivery instructions where applicable, and special handling notes with couriers and freight forwarders. Partners include last-mile riders in Nairobi, regional parcel carriers, and pallet logistics firms for wholesale orders to warehouses upcountry.

Shared data is limited to what is necessary for each shipment leg. Tracking numbers link status updates back to your account or SMS notifications. Couriers are prohibited from using your data for unrelated purposes and must delete or return data according to contract terms after delivery completion unless law requires longer retention.

When you choose third-party pickup points or locker services, their privacy policies also apply to data they collect during collection. We encourage reviewing those policies before selecting such delivery options for valuable custom-printed packaging consignments.

International shipments of packaging samples or specialised imports may require sharing data with customs brokers and clearing agents under import regulations. We disclose only information required for clearance and comply with export/import documentation laws.

If a courier reports a security incident affecting delivery data, we coordinate response efforts, notify you when required, and evaluate whether to change providers or strengthen contractual protections for future shipments of your orders.

If Enzi Packaging undergoes merger, acquisition, asset sale, reorganisation, or insolvency proceedings, personal data may be transferred to a successor entity continuing packaging operations, subject to confidentiality agreements and continued protection consistent with this Privacy Policy and the Kenya Data Protection Act.

Prospective buyers may receive limited personal data in data rooms under strict non-disclosure agreements for due diligence on customer contracts and order volumes. Such access is logged and restricted to evaluating business viability, not for unrelated marketing.

We will notify affected customers of material ownership changes affecting data processing through website notices or direct communication where practicable. You may have rights to object to certain processing changes or to withdraw consent for marketing under new ownership.

In insolvency, data may be processed by administrators or receivers as required by law to wind up affairs, collect debts on unpaid wholesale invoices, or transfer customer contracts to purchasers of business units supplying packaging.

Any successor must honour existing privacy commitments or provide notice of material policy changes and obtain consents where required before implementing substantially different processing purposes.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Business Transfers, Restructuring, and Insolvency should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Although Enzi Packaging primarily serves Kenyan customers from Nairobi, some technology providers host data in data centres outside Kenya, including cloud regions in the European Union, United States, or South Africa. Cross-border transfers occur for website hosting, email infrastructure, backup storage, and analytics where local alternatives are not used.

Transfers comply with the Kenya Data Protection Act requirements, including adequacy decisions where applicable, appropriate safeguards such as standard contractual clauses, binding corporate rules, or explicit consent for specific transfers. We conduct transfer impact assessments when required to evaluate foreign legal environments and supplementary measures.

Payment processors and global courier tracking platforms may route data internationally to provide real-time status updates on export or import packaging consignments. We minimise fields transferred and encrypt data in transit using industry-standard protocols.

You may request information about countries where your data may be processed by contacting info@enzipackaging.co.ke. Where the Act grants rights to object to transfers lacking adequate protection, we explain available options, which may include limited service alternatives that do not require foreign hosting.

We monitor regulatory developments from the ODPC regarding cross-border transfers and update our subprocessors and safeguards accordingly to maintain lawful processing.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about International and Cross-Border Data Transfers should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

We retain personal data only as long as necessary for the purposes collected, including satisfying legal, accounting, and reporting requirements. Retention periods vary by data category: active account profiles persist while accounts remain open; order and invoice records typically retained seven years for tax compliance; marketing consents logged until withdrawal plus proof retention; support tickets retained three years after closure unless litigation requires longer.

Payment transaction logs including M-Pesa codes retained per finance policy and statutory minimums. Courier proof-of-delivery images may be deleted after dispute windows expire under our Refund Policy. Website analytics anonymised or deleted per configured tool retention, often fourteen to twenty-six months.

Wholesale contracts and credit files retained for contract duration plus limitation periods for debt collection and legal claims. Artwork files for custom packaging may be retained to facilitate reorders unless you request deletion and no outstanding obligations exist.

When retention expires, we securely delete or anonymise data so individuals are no longer identifiable. Backups may persist for limited cycles before overwrite; deletion from live systems propagates to backups on scheduled rotation.

You may request erasure where no overriding legal ground requires continued retention. We explain any refusal with reference to specific legal obligations, such as pending consumer protection investigations or unpaid invoice disputes.

Enzi Packaging implements layered security controls proportionate to risks of processing customer and wholesale data. Measures include firewalls, intrusion detection, malware protection on staff workstations, role-based access to order systems, multi-factor authentication for administrative accounts, and encrypted HTTPS for website traffic including checkout sessions.

Physical security at Dynamic Mall Suite ML135 includes access controls to offices and stock areas where printed customer details may appear on picking lists. Staff are trained to lock screens, shred confidential waste, and avoid discussing customer orders in public areas.

Payment security aligns with partner requirements; we do not store M-Pesa PINs or complete card numbers. Access to production systems logging personal data is reviewed periodically and revoked when employment ends. Vendor access is time-limited and monitored.

Despite safeguards, no system is completely secure. We maintain incident response plans to contain breaches, assess impact, notify the ODPC and affected individuals when legally required, and implement remedial measures. Customers should use strong passwords, protect M-Pesa devices, and report suspicious emails claiming to be from info@enzipackaging.co.ke.

We evaluate security through periodic reviews, penetration testing where appropriate for e-commerce changes, and updates following known vulnerabilities in software components powering our packaging storefront.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Technical and Organisational Security Measures should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Access to personal data is granted on a need-to-know basis to employees and contractors performing order processing, delivery coordination, finance, marketing, IT, and management functions. Authorisation is documented in access control matrices reviewed when roles change.

All staff handling customer information sign confidentiality agreements acknowledging duties under the Kenya Data Protection Act and internal policies. Training covers recognising phishing, securing devices, proper disposal of documents containing addresses or phone numbers, and escalating suspected data incidents to management immediately.

Temporary staff during peak packaging seasons receive limited access scoped to specific tasks such as pick-and-pack under supervision. Agency workers are bound by contractual data protection clauses mirroring employee obligations.

Managers conduct periodic access reviews to remove dormant accounts and excessive privileges. Privileged administrative actions on databases containing order histories are logged for audit purposes.

Violations of confidentiality may result in disciplinary action, termination, and referral to authorities where unlawful disclosure occurs. Report suspected insider misuse to info@enzipackaging.co.ke with as much detail as possible for investigation.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Employee Access and Confidentiality Obligations should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Under the Kenya Data Protection Act, you have the right to confirm whether we process your personal data and to obtain a copy of that data in understandable form, subject to exceptions for rights of others, trade secrets, or legal privilege. Access requests help you verify order histories, marketing preferences, and delivery records held by Enzi Packaging.

Submit requests to info@enzipackaging.co.ke with sufficient identity verification, such as matching email, phone number, or M-Pesa transaction codes from recent packaging purchases. We respond within the statutory timeline, typically within one month, possibly extended for complex wholesale account exports with notice to you.

Responses may be provided electronically or in writing. We explain purposes of processing, categories of data, recipients such as couriers, retention periods, and sources if not collected directly from you. Where data is automated, we inform you of logic involved in pricing or credit decisions where applicable.

We may charge a reasonable fee only where requests are manifestly unfounded or excessive, as permitted by law. We guide you to narrow requests where possible to expedite responses.

If you are dissatisfied with our response, you may lodge a complaint with the ODPC as described in our complaints section.

You may request correction of inaccurate or incomplete personal data, such as misspelled delivery addresses, outdated company names on wholesale accounts, wrong contact numbers, or incorrect billing details affecting VAT invoices for packaging purchases. Accurate data is essential to avoid failed deliveries and payment reconciliation errors.

Submit rectification requests via info@enzipackaging.co.ke or account settings where self-service editing is available. We verify identity before altering records linked to financial transactions. Corrections propagate to pending orders where feasible; dispatched orders may require courier notification for address updates.

If we disagree that data is inaccurate, we document your objection and restrict disputed processing where required while verifying facts with delivery proofs or payment records.

We encourage proactive updates when relocating Nairobi offices, changing authorised wholesale signatories, or switching M-Pesa numbers used for business payments.

Processors such as couriers receive updated data when necessary to complete fulfilment after rectification. We are not responsible for third-party systems that retain outdated copies until their own update cycles complete.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Your Right to Rectification and Accuracy should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

You may request deletion of personal data where processing is no longer necessary for original purposes, consent is withdrawn and no other legal basis exists, you object to processing based on legitimate interests without overriding grounds, data was unlawfully processed, or erasure is required for legal compliance.

Erasure may be limited where we must retain data for tax records, unresolved consumer protection disputes, pending deliveries of packaging orders, or establishment of legal claims. We explain specific grounds when declining full deletion.

Account deletion requests remove profile access and anonymise identifiers in marketing lists. Order records may persist in anonymised or pseudonymised form for accounting while removing direct identifiers where compatible with legal duties.

Backups containing deleted data are overwritten on schedule; immediate purge from all backup media may not be technically feasible but live systems cease active processing upon approval of erasure.

Submit erasure requests to info@enzipackaging.co.ke. We confirm completion or provide reasons for partial retention within statutory timelines.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Your Right to Erasure (Right to Be Forgotten) should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

You may request restriction of processing while accuracy is contested, processing is unlawful but you prefer restriction over erasure, we no longer need data but you require it for legal claims, or you have objected pending verification of our legitimate grounds.

During restriction, data is stored but not actively processed except with your consent, for legal claims, protection of others' rights, or important public interest grounds. Restricted wholesale accounts may pause marketing and non-essential analytics while still fulfilling outstanding packaging contracts.

We notify you before lifting restriction where appropriate. Restriction flags are applied in our CRM and order systems to prevent automated marketing sends.

Contact info@enzipackaging.co.ke to invoke this right with explanation of circumstances. We acknowledge requests promptly and document internal actions taken.

Restriction complements rather than replaces other rights; you may still exercise access or portability regarding restricted data sets.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Your Right to Restrict Processing should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

You may object to processing based on legitimate interests, including profiling related to direct marketing for packaging promotions. Upon objection to marketing, we cease such processing unless we demonstrate compelling legitimate grounds overriding your interests or for legal claims.

Objections to processing necessary for contract performance may limit our ability to fulfil orders, deliver packaging, or manage wholesale credit. We explain consequences clearly so you can make informed choices.

Object to analytics or non-essential cookies via consent tools and browser settings. Objections to mandatory tax or fraud-prevention processing may not be honoured where law requires continued processing.

Submit objections in writing to info@enzipackaging.co.ke. We review balancing tests for legitimate interest processing and respond with outcomes, including cessation or justification for continuation.

Unresolved objections may be referred to the ODPC alongside other complaints.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Your Right to Object to Processing should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Where processing is based on consent or contract and carried out by automated means, you may request structured, commonly used, machine-readable copies of personal data you provided, such as account registration details, saved addresses, and order history exports where technically feasible.

Portability applies to data processed by us, not to derived analytics or proprietary wholesale pricing algorithms. We provide CSV or JSON formats where systems permit within one month of verified requests.

You may request direct transmission to another controller where technically feasible and secure; we assess interoperability with recipient systems before agreeing.

Portability does not affect our retention obligations or rights of third parties mentioned in your orders, such as delivery recipients whose data cannot be ported without their consent.

Contact info@enzipackaging.co.ke to initiate portability requests alongside identity verification steps.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Your Right to Data Portability should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Where processing relies on consent, including optional marketing emails about packaging deals, non-essential cookies, or promotional SMS, you may withdraw consent at any time without affecting lawfulness of prior processing.

Withdraw via unsubscribe links, cookie banner settings, replying STOP to SMS where supported, or emailing info@enzipackaging.co.ke. We process withdrawals promptly and suppress future consented activities.

Withdrawal of consent for essential processing is not possible while maintaining active orders; contractual and legal bases then govern continued minimal processing for fulfilment and compliance.

We maintain records of consent and withdrawal timestamps to demonstrate compliance with the Kenya Data Protection Act accountability principle.

Marketing suppression lists are synchronised across platforms to reduce risk of duplicate promotional messages after withdrawal.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Withdrawal of Consent should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Enzi Packaging operates from Dynamic Mall Suite ML135, Nairobi, Kenya, supplying boxes, bags, films, and custom printed packaging across Kenya. We apply proportionate safeguards for data described under Withdrawal of Consent, including access controls, secure order systems, and processor agreements with payment and logistics partners. We respond to access, rectification, erasure, and objection requests within statutory timelines where applicable and cooperate with the Office of the Data Protection Commissioner when required.

If you believe Enzi Packaging has violated your privacy rights under the Kenya Data Protection Act, we encourage you to contact us first at info@enzipackaging.co.ke so we can investigate and remedy issues promptly. Many concerns about delivery data sharing, marketing opt-out failures, or access delays are resolved through direct dialogue.

If unresolved, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), the independent regulatory authority overseeing data protection in Kenya. Complaint procedures, forms, and contact details are published on the ODPC official website and may be updated from time to time.

Provide our response correspondence and evidence such as order numbers, dates of requests, and descriptions of alleged breaches when filing complaints. We cooperate fully with ODPC investigations and implement binding corrective orders.

Complaints relating to payment data may also involve payment service provider ombudsman channels; we assist in clarifying what Enzi Packaging processed versus what Safaricom or banks processed in M-Pesa transactions.

Retaliation against individuals exercising privacy rights is prohibited in our workplace policies and commercial relationships.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Complaints to the Office of the Data Protection Commissioner should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Our packaging e-commerce services target businesses and adults purchasing supplies for commercial or household use. We do not knowingly collect personal data from children under eighteen without appropriate parental or guardian consent required by law.

If a minor places an order without authorization, parents or guardians may contact us to cancel fulfilment where legally permitted and request deletion of associated data. School or youth organisation orders should be placed by authorised adult representatives.

Marketing communications are not directed at children. Our website content focuses on packaging specifications, wholesale pricing, and business applications rather than child-oriented themes.

If we discover inadvertent collection from a minor, we delete data promptly except where retention is legally mandated. Report concerns to info@enzipackaging.co.ke.

Educational institutions purchasing art supplies packaging or science project materials should ensure compliance with their own child data policies when sharing student project names for custom printing.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Children and Young Persons Privacy should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

We may use automated systems to detect fraudulent wholesale orders, recommend packaging sizes based on prior purchases, display recently viewed products, or flag credit risk indicators for business accounts. These processes support efficiency and security rather than solely automated legal decisions affecting you without human review.

Significant decisions with legal or similarly significant effects, such as denying wholesale credit solely by algorithm without human intervention, are not our standard practice. Where automated processing materially affects you, you may request human review, express your point of view, and contest decisions under the Act.

Profiling for direct marketing respects opt-out rights. Analytics segmentation uses purchase categories like food service packaging versus industrial wrap without sensitive attribute inference.

We document logic involved in credit scoring or fraud rules at summary level upon valid access requests, protecting proprietary security methods from disclosure that would enable fraud.

Contact us if you believe an automated process adversely affected your order or account status.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Automated Decision-Making and Profiling should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Video surveillance may operate at Dynamic Mall Suite ML135 for crime prevention, staff safety, and protection of packaging inventory and equipment. Cameras may cover entrances, loading areas, and sales counters where customers interact with staff. Signage notifies visitors of CCTV operation where required by law.

Footage may incidentally capture customer images during visits, collections of bulk orders, or consultations on custom printing. Recordings are accessed only by authorised personnel for investigating theft, disputes, or safety incidents, and shared with law enforcement when legally required.

Retention periods for CCTV are limited, typically thirty to ninety days unless an incident requires longer preservation. Footage is not used for marketing and is not linked to online browsing profiles.

You may request access to footage depicting you subject to exceptions protecting others' privacy and ongoing investigations. Contact info@enzipackaging.co.ke with approximate date and time of visit.

CCTV processing is justified by legitimate interests in security, balanced against privacy through minimised scope, limited retention, and access controls consistent with the Kenya Data Protection Act.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about CCTV and Premises Security at Our Nairobi Location should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Enzi Packaging maintains profiles on social media platforms where you may message us, view packaging showcases, or click through to our website. Platforms act as independent controllers for data they collect when you interact with their services; their privacy policies apply alongside ours when you engage with our official pages.

When you use social login features if offered, we receive profile information you authorise sharing, such as name and email, to pre-fill account registration. You can disconnect social login and use email registration instead.

Embedded social sharing buttons on product pages may transmit data to platforms when clicked, even before sharing content. Configure browser privacy extensions or refrain from clicking if you wish to avoid such transfers.

User-generated content, such as photos of your products in our boxes tagged with our handle, may be reshared with credit unless you object. Direct messages containing order details are handled per our support records section.

We monitor public mentions for service quality but do not collect private group data without authorisation.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Social Media and External Platform Integration should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

We revise this Privacy Policy when processing activities change, new packaging services launch, subprocessors change, or Kenyan law and ODPC guidance evolve. Version history may be archived internally with effective dates displayed on the published document.

Material changes affecting how we use personal data for marketing, new categories of collection, or cross-border transfers trigger prominent website notices or email notifications to registered accounts where appropriate.

Continued use of our website or placement of orders after effective dates constitutes acceptance of updated terms where permitted by law; where consent is required for new processing, we obtain fresh consent before proceeding.

Review this policy periodically when purchasing recurring wholesale packaging supplies or integrating our checkout with your e-commerce store.

Prior versions available on request to info@enzipackaging.co.ke for comparison when disputing historical processing practices.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Changes and Updates to This Privacy Policy should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

Privacy questions, rights requests, breach reports, and processor inquiries should be directed to info@enzipackaging.co.ke with subject line 'Privacy Request' for prioritised handling. Include your full name, contact phone, account email, and relevant order or M-Pesa reference numbers to expedite verification.

Telephone support at +254 1100-50620 assists with general order issues but may redirect detailed privacy matters to written channels for documentation. Visit us at Dynamic Mall Suite ML135, Nairobi, Kenya during business hours for in-person discussions; bring identification for access requests.

We strive to resolve enquiries fairly and transparently, explaining legal bases and retention in plain language. Escalation to senior management available if initial responses are unsatisfactory.

Response times align with Kenya Data Protection Act requirements; complex wholesale data exports may require additional verification calls to authorised company representatives.

Keep contact details updated in your account so we can reach you regarding security incidents or rights request outcomes affecting your packaging orders.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Contacting Us About Privacy and Data Protection should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

In this Privacy Policy, 'personal data' means information relating to an identified or identifiable natural person as defined in the Kenya Data Protection Act. 'Processing' means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

'Data controller' means Enzi Packaging determining purposes and means of processing. 'Data processor' means third parties processing on our instructions. 'Consent' means freely given, specific, informed, and unambiguous agreement. 'Wholesale client' means business customers ordering packaging in bulk under trade terms.

'Website' refers to our official e-commerce and informational site at enzipackaging.co.ke and associated subdomains. 'Services' include retail and wholesale sales, custom printing, delivery, and customer support. References to 'include' or 'including' are illustrative not exhaustive.

Headings are for convenience only and do not affect interpretation. Kenyan law governs this policy unless otherwise stated for specific cross-border processing agreements.

Translations may be provided for convenience; English version prevails in case of conflict.

This section forms part of Enzi Packaging's privacy and data governance framework for retail and wholesale packaging customers, website visitors, and delivery recipients. We review these practices regularly, document processing activities for accountability under the Kenya Data Protection Act, 2019, and train Nairobi staff handling orders, M-Pesa payment references, and courier instructions. Questions about Definitions and Interpretation should be emailed to info@enzipackaging.co.ke with order numbers or transaction codes where relevant, or call +254 1100-50620 during business hours.

This Privacy Policy should be read together with our Terms and Conditions, Refund and Returns Policy, and Cookie Policy if separately published. Wholesale clients may have additional data clauses in signed supply agreements. Payment partners and couriers maintain independent privacy notices for M-Pesa and delivery data they control.

By accessing our website, creating an account, submitting quote requests for branded packaging, completing checkout with M-Pesa or other methods, subscribing to marketing, or engaging our wholesale services, you acknowledge that you have read and understood this Privacy Policy.

Where processing requires consent, you provide it through affirmative actions described throughout this document. You confirm that information you supply is accurate and that you have authority to provide data of employees or agents listed on wholesale orders.

If you do not accept this Privacy Policy, discontinue use of our services and contact us to close accounts or delete pending marketing registrations, subject to retention limits for completed transactions.

We appreciate your trust in Enzi Packaging to handle your data responsibly while supplying quality packaging solutions across Kenya from our Nairobi base at Dynamic Mall Suite ML135.

Thank you for partnering with us. For any privacy concern, reach us at info@enzipackaging.co.ke or +254 1100-50620.