PRIVACY POLICY

INTRODUCTION

At ORLI ESSENCE we believe that beauty, wellness and self-care should be accompanied by trust, transparency and respect for personal privacy. We are committed to safeguarding the personal data entrusted to us by our customers, website visitors, suppliers, influencers, business partners and all individuals who interact with our brand, products and services.

We understand that when you purchase beauty and skincare products, subscribe to our social media pages, engage with our beauty consultants, participate in promotions or interact with our digital platforms, you place confidence in our ability to handle your information responsibly and securely. Protecting your privacy is therefore fundamental to our relationship with you.

This Privacy Policy explains how we collect, use, process, store, disclose, transfer and protect your personal data when you access or use our website, social media pages, e-commerce platforms, physical stores and related services (collectively referred to as the "Services").

The Company undertakes to process all personal data in accordance with applicable privacy and data protection laws including the Data Protection Act, 2019, regulations issued by the Office of the Data Protection Commissioner and any other applicable international privacy standards where relevant.

By accessing or using our Services, you acknowledge that you have read, understood and agreed to the terms of this Privacy Policy.

WHO WE ARE

This Website and all related Services are owned and operated by ORLI ESSENCE, a business duly incorporated under the Kenyan Laws with its registered office situated at Nairobi.

WHAT CONSTITUTES PERSONAL DATA

For purposes of this Policy, "Personal Data" refers to any information or combination of information capable of identifying an individual either directly or indirectly. Such information may include names, contact information, delivery addresses, payment details, photographs, online identifiers, device information, purchase history, skincare preferences and any other information linked to an identifiable person.

Personal data may also include information voluntarily provided by customers concerning skin conditions, allergies, cosmetic sensitivities, beauty routines, product preferences or related wellness information where necessary for personalized beauty consultations or product recommendations.

INFORMATION WE COLLECT

The Company may collect personal data directly from you, automatically through your use of our Services or from third parties lawfully authorized to share such information with us.

Information collected directly from you may include your full name, telephone number, email address, physical address, billing details, payment information, social media handles, profile photographs and account login credentials.

Where you purchase products through our Website, we may collect transactional information including order history, product selections, delivery details, payment confirmations, refund requests and customer service interactions.

The Company may additionally collect beauty and skincare-related information voluntarily provided by users including skin type, complexion preferences, product sensitivities, allergies, cosmetic concerns and other information relevant to tailoring product recommendations and improving customer experience.

We may also automatically collect technical and usage information whenever you interact with our Website. Such information may include pages visited, duration of visits and interactions with advertisements or marketing communications.

Where permitted by law, we may receive information about you from third-party providers including payment processors, logistics partners, marketing providers, analytics services and social media platforms.

HOW WE USE YOUR PERSONAL DATA

The Company processes personal data for lawful, legitimate and specific business purposes connected to the operation of our beauty and cosmetic business. Your personal data may be used to create and manage customer accounts, process transactions, verify payments, arrange deliveries, manage returns and refunds, respond to customer inquiries and provide customer support services.

We may further use personal data to personalize your shopping experience, recommend products suited to your skincare or beauty preferences, improve our product offerings, analyze customer trends and enhance the overall functionality and performance of our Website and Services.

Where you have provided consent, we may use your personal data to send promotional materials, exclusive beauty offers, product launch notifications, event invitations, skincare tips and personalized marketing communications.

The Company may additionally process personal data for regulatory compliance, protection of the integrity and security of our business operations. We shall not process your personal data for purposes inconsistent with those disclosed in this Policy unless required or permitted by law or with your further consent.

LEGAL BASIS FOR PROCESSING

The Company shall only process personal data where a lawful basis exists for such processing. Such lawful basis may include processing necessary for the performance of a contract, compliance with legal obligations, protection of legitimate business interests, protection of vital interests or processing undertaken pursuant to the consent of the data subject.

Where consent forms the basis of processing, such consent may be withdrawn at any time without affecting the lawfulness of processing undertaken prior to withdrawal. The Company may also process personal data where such processing is necessary for the establishment, exercise or defense of legal claims or for purposes authorized under applicable law.

PERSONALIZED BEAUTY RECOMMENDATIONS

As part of our commitment to improving customer experience, the Company may use customer preferences, purchase history and beauty profile information to personalize product recommendations, skincare suggestions, advertisements and marketing communications. This may involve limited automated processing or profiling intended to better understand customer interests, beauty concerns and shopping preferences in order to recommend products that may be suitable for individual users.

COOKIES AND TRACKING TECHNOLOGIES

The Website uses cookies and similar technologies to improve website functionality, remember user preferences, analyze website traffic, personalize user experience and measure the effectiveness of marketing campaigns. Cookies may additionally be used to facilitate shopping cart functionality, remember login credentials, provide targeted advertising and improve customer engagement across digital platforms.

Users may modify browser settings to decline or disable cookies, although certain features and functionalities of the Website may not operate properly as a result.

DISCLOSURE OF PERSONAL DATA

The persons having access to your personalized data are authorized employees within the competent departments of the company. The Company may disclose personal data to carefully selected third-party service providers where such disclosure is necessary for the operation of our business and the provision of our Services.

The Company shall ensure that all third parties processing personal data on its behalf are subject to strict confidentiality obligations and implement adequate security safeguards consistent with applicable privacy laws. The Company does not sell personal data to third parties.

Personal data may additionally be disclosed where required by law, court order, regulatory directive or where necessary for the protection of the Company's legal rights, property, systems, employees, customers or the public.

INTERNATIONAL DATA TRANSFERS

Due to the global nature of technology infrastructure and digital commerce, personal data may be transferred to, stored in or accessed from jurisdictions outside the country in which the data was originally collected. Where international transfers occur, the Company shall take reasonable steps to ensure that appropriate safeguards are implemented to protect personal data, including contractual protections, confidentiality obligations and security measures consistent with applicable data protection laws.

By using our Services, you acknowledge and consent to such cross-border transfers where reasonably necessary for the operation of the Website and related Services.

HOW WE PROTECT YOUR PERSONAL DATA

The Company is committed to maintaining appropriate technical, administrative and organizational measures designed to protect personal data against unauthorized access, misuse, loss, destruction, alteration or disclosure. Such safeguards may include secure servers, encrypted payment gateways, password protection, restricted staff access, internal confidentiality obligations, cybersecurity monitoring systems, firewalls, anti-malware protections and secure cloud infrastructure.

Only authorized personnel and trusted service providers with a legitimate business need shall have access to personal data.

RETENTION OF PERSONAL DATA

The Company shall retain personal data only for as long as reasonably necessary to fulfill the purposes for which the information was collected; including compliance with legal, regulatory, tax, accounting and enforcement obligations. In determining retention periods, the Company shall consider the nature of the personal data, the sensitivity of the information, applicable legal requirements and the operational necessity for retaining such information.

Where personal data is no longer required, the Company shall securely delete, anonymize or destroy the information in accordance with applicable laws and internal retention procedures.

USER GENERATED CONTENT AND SOCIAL MEDIA

Where users submit reviews, testimonials, comments, photographs, beauty content, social media tags or other user-generated content through the Website or the Company's social media platforms, such information may become publicly accessible. Users are advised not to disclose sensitive personal information through publicly accessible channels.

The Company shall not be liable for the use or disclosure of information voluntarily made public by users through social media platforms or public forums. Where customer photographs, reviews or testimonials are used for promotional purposes, the Company shall obtain appropriate consent where required by law.

YOUR RIGHTS

Subject to applicable law, data subjects may have the right to access personal data held by the Company and request correction, updating, restriction or deletion of inaccurate or outdated information. Users may additionally object to certain forms of processing, withdraw consent, request portability of personal data and opt out of direct marketing communications at any time.

The Company shall consider and respond to all legitimate requests within the timelines prescribed under applicable law, subject to any legal or operational limitations.

CHANGES TO THIS PRIVACY POLICY

The Company reserves the right to amend, revise or update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, technological developments or business needs. Any amendments shall become effective upon publication on the Website unless otherwise stated.

The new policy may be displayed on-screen and you may be required to read and accept them to continue your use of the App or the Services. In any event, by continuing to use the App or any Services after the posting of any changes, you confirm your continuing acceptance of this Privacy Policy together with such changes, and your consent to the policy set out therein.

The data collected is voluntary and not mandatory or pursuant to any law in Kenya.

CONTACT

For any questions, concerns or requests relating to this Privacy Policy or the processing of personal data, users may contact us via email.