Privacy Policy

Last Updated: November 05, 2025.

This Privacy Policy ("Policy") describes what personal information Mr Office Kenya (“Mr Office Kenya”, “we”, “our”, or “us”) collects, uses, shares, retains, or otherwise processes in connection with its website, online services, stores, and other locations where the Policy is located or referenced (the “Platform”) online and offline, and how we treat such information. The Policy also informs individuals, including customers, job applicants, and website visitors (“you”) about your rights regarding your personal information and how to exercise these rights under the Data Protection Act, 2019 (the "DPA") of Kenya.

This Policy, along with our Terms of Use, which are incorporated by reference, constitute a legally binding agreement between you and Mr Office Kenya that conditions your interaction with the Platform, where and as permitted by applicable law and regulation (collectively, “law”), including the DPA. Please read this Privacy Policy carefully before using the Platform or submitting Personal Information to us. By accessing or using our Platform or otherwise communicating with us, you acknowledge that you have reviewed and understand this Policy and consent to the processing of your personal information as described herein.

We collect Personal Information from and about you.

We collect information when you interact with our Platform, for example, (1) when you visit and use our website, (2) when you email us or submit forms online, (3) when you call, text, message us via chat, or visit us in our stores, or (4) when we are otherwise in communication with or providing products or services to you.

Certain of the information we collect may be “Personal Information,” by which we mean information relating to an identified or identifiable natural person, such as a name, postal address, e-mail address, telephone number, and/or payment information, as defined under the DPA.

The Personal Information we collect or receive varies depending on how you interact with us. Depending on that interaction, we collect:

Identifiers, including contact information and device information.
This may include your name, address, telephone number or e-mail address. For example, we might collect this Personal Information if you place an order, or participate in an event. We might also collect contact information if you fill out a customer information form in one of our stores. We may also collect the type of device you use to access our Platform, and collect your device identifier, IP address or mobile operating system.

Payment information.
For example, we may collect your billing and shipping address when you buy office furniture or related products. Payment details, such as credit card information, are handled directly by third-party payment processors and are not collected or stored by us.

Communications, including electronic and audio, from you.
We may collect Personal Information you post in a public space on our Platform, such as when you leave a product review. We may also collect Personal Information, and the content of your messages, when you send us a message through the “Contact” page, use a “wish list,” use live chat, utilize the online appointment service for store visits, or when you enter a promotion. We may also collect audio recordings or photos related to product inquiries when you contact us. We may also collect information such as survey responses when you are responding to a survey. We may use third-party tools for the collection of this information, as described further below.

Commercial information, including purchase history.
We may collect Personal Information about the purchases you make online or in stores. This could include the products you purchased (e.g., desks, chairs) and their prices. We also collect information about the services you have purchased, such as delivery or assembly.

Internet or other electronic network activity information, including Product and Platform usage information.
We collect information about when and how people visit and interact with our services and Platform, including our website, such as what pages they accessed, and their interaction with the website and its features, such as search functions and product views. We might look at what site you came from, or what site you visit when you leave us. We might also review information regarding your interactions with our communications, such as email and chat. We also receive information to help detect and prevent consumer fraud, including but not limited to browser and keyboard language settings, whether data is automatically filled or manually entered, and proxy detection. We and/or our partners may use tools, including from third parties, to collect some of this information.

Location information.
We collect delivery location addresses only when you provide them via text, call, or note during the order process for shipping purposes. We do not collect device-based geolocation information. For more information about your options related to the collection of your location information, see the YOUR RIGHTS UNDER THE DATA PROTECTION ACT section below.

Video surveillance footage in our stores.
We use video surveillance in our stores in order to detect and address security and safety incidents, shoplifting, other potentially illegal activities, and adequate staffing considerations. If you enter our store, your images may be collected for these purposes.

Professional, employment-related, and candidacy information.
When you apply for a job with us, we will collect various of the information categories described above. In addition, we may collect additional identifiers, such as national ID number, previous work and education experience, references, and any other professional information collected as part of your employment application and our hiring process; residency, citizenship, or work permit status; and information required for us to comply with laws, including at the direction of law enforcement authorities or court orders.

Sensitive Personal Information.
Certain of the Personal Information we collect also falls under the sub-category of “Sensitive Personal Information” as defined by the DPA, such as information related to your racial origin, religious beliefs, health, or sexual orientation. If we collect such information (e.g., for employment purposes), we only collect and use such information with your explicit consent or as necessary to provide goods and services to you, and do not use such information to infer characteristics about you. We do not process Sensitive Personal Information without a lawful basis under the DPA.

We collect Personal Information in different ways.

We collect Personal Information directly from you.
For example, if you make a purchase on our Platform, we collect your Personal Information. We also collect Personal Information when you fill out a customer information form in one of our stores. We may also collect your Personal Information if you sign up for promotional emails, contact us, or interact with us online, through chat. We obtain your consent before collecting and processing your Personal Information where required.

We collect Personal Information from you passively.
We collect Personal Information about users over time and across different websites, apps and devices when you use the Platform. Our vendors and partners may also collect Personal Information this way on our Platform. For example, this may include when you visit and navigate our Platform on any device or click on sponsored links or third-party advertisements. We may also use cookies, web beacons, and other tracking technologies for these purposes. Cookies are small files that download when you access certain websites. To learn more, visit our Cookie Policy [link if applicable].

We combine Personal Information.
For example, we may combine Personal Information that we collect offline with Personal Information we collect through our website. We may also combine Personal Information we collect about you from the different devices you use to access our Platform.

We use Personal Information as we describe.

We process Personal Information in accordance with the DPA principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.

We use information to provide Mr Office Kenya products and services.
We use Personal Information to provide our Platform, products, features, and services. This may include using Personal Information to process your order and ship items, to offer you a shopping experience in store or online, for customer support, to provide our website to you and make it easier for you to use, to manage our relationship with you, to provide you recommendations and personalize your experience (e.g., suggesting office furniture based on past purchases), to fulfill your orders and requests, to facilitate delivery or assembly of your product, and to manage and provide our websites.

We use Personal Information to improve our understanding of your interests and concerns, and improve our Platform, products, and services.
We may use your Personal Information to make our Platform, products, and services better. We may use your Personal Information to customize your experience with us and to improve our products and services, such as our website and your shopping experience.

We use Personal Information to communicate with you, including to respond to your requests, messages, or questions.
For example, we may use your Personal Information to send you information you request. We may also use your Personal Information to communicate with you via phone, email, chat, app (including push notifications) or in person, and to improve our services in those regards. Marketing communications require your prior consent.

We use Personal Information for security and legal purposes.
We may use Personal Information to protect our company, our consumers, our associates, and our Platform. For instance, we and/or our service providers use Personal Information to prevent and protect against consumer fraud and violations of the Terms of Use, including through proxy, spoofing, and copy/paste detection, transaction data, and visits to the Platform. Suspected fraud or violation of the Terms of Use may result in denial of purchase and/or legal action. We also use Personal Information to collect and enforce accounts.

We use Personal Information for advertising and marketing purposes.
For example, we may use your Personal Information to contact you about new products and special offers we think you'll find valuable (e.g., discounts on office chairs), but only with your consent. We may send you emails or text messages as permitted by law and based on your consent. If you use our mobile applications, we may send you push notifications about new products or special offers, subject to opt-in.

We use Personal Information to administer or communicate with you about your account or our relationship.
We may contact you about changes to our Platform or about service updates. We may also contact you about feedback or about this Policy or our Platform Terms.

We use Personal Information to evaluate your candidacy for a job with us.
As a job applicant or recruit, we may use your Personal Information to evaluate your candidacy for a position with us.

We use Personal Information for other purposes.
For example, we use Personal Information to maintain transaction and other business records. We will do this for as long as we deem necessary to fulfill the business purpose for which the Personal Information was collected. We also use Personal Information for internal purposes as permitted by law. This includes administrative and audit purposes. We also use Personal Information to meet legal, insurance and processing requirements. We will also use Personal Information as otherwise allowed by law, including if we have notified you and obtained your consent where required. In some circumstances, we may seek your explicit consent, for example, if we are legally required to do so.

We may share Personal Information with third parties.

We share Personal Information only as permitted by the DPA, typically with processors bound by data processing agreements that ensure compliance.

We will share Personal Information with vendors who perform services on our behalf.
For example, we share Personal Information with vendors who send emails for us. We may also share Personal Information with service providers that help us operate our Platform or run promotions. This may also include vendors who assist with payment processing, shipping, fraud detection and prevention, customer service, data hosting and processing or for storage purposes. These vendors act as data processors and are contractually obligated to protect your information.

We will share Personal Information with third parties at your direction, including for payment purposes.
Payments for purchases made through our site may be completed using third-party vendor payment systems. We do not store or disclose your credit card information as part of your purchase through these third-party systems. The personal or financial information you provide through payment processors is subject to the third-party privacy policy.

We may share your Personal Information with our business partners, including for marketing and analytics.
We work with advertising, marketing, and other similar partners. We may disclose Personal Information to these partners, as permitted by law and with your consent, including for the reasons described below.

• Event and Promotions. We may share Personal Information with third parties who jointly sponsor an event or promotion with us, with your consent.

• Advertising and Marketing. We may share Personal Information with third-party marketing and advertising partners to understand how our Platform is used, to track your use of our site, and to serve you advertising based on your interests, subject to your opt-in consent. Our third-party partners may receive information about your use of our Platform by placing cookies or other trackers, as described above. Information disclosed to third parties for these purposes includes basic identification information, device information and other unique identifiers, your activity on our website such as pages viewed, and commercial data.

• Measurement and Analytics. We may share your Personal Information with companies that provide aggregate reporting of our website performance and information related to the effectiveness of our advertising services.

We do not "sell" Personal Information as defined under the DPA.

We may share your Personal Information with any successor to all or part of our business.
This includes if we are merged or all or part of our business or assets are transferred, assigned or sold. Your Personal Information will be disclosed to our successor or assign in these circumstances who can use and disclose your Personal Information for substantially the same purpose as set out in this Policy, subject to notification.

We will disclose your Personal Information if we think we have to in order to comply with the law or to protect ourselves, as permitted by law.
This includes compliance with Kenyan laws or laws outside of Kenya that might apply to us. For example, we will share your Personal Information to respond to a court order or subpoena. We may share it if a government agency or investigatory body requests. We might share your Personal Information when we are investigating potential fraud, or if we are, or believe we may need to defend or assert a legal claim. This might include fraud we think has happened during a sweepstakes or promotion.

All the above categories exclude text messaging originator opt-in data and consent.

Retention of Personal Information.

For each category of Personal Information listed above, we retain the Personal Information for as long as is necessary to fulfill the purpose for which it was collected, including to satisfy legal, accounting, or reporting requirements and, where required for us to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled, in line with DPA storage limitation principles.

We use the following criteria to determine how long to retain Personal Information:

• Our relationship with you.

• Your requests to us regarding your Personal Information.

• Any legal obligations to retain the data, or for our own legal purposes.

• Technical considerations, and level of protections in place for your Personal Information.

You have rights regarding your Personal Information.

Under the DPA, you have certain rights regarding how we process your Personal Information. These rights are not absolute and are subject to limitations and exceptions under the law.

Your Rights under the Data Protection Act:
(1) Right to be informed: You have the right to be informed of the use to which your personal data is to be put, including the purposes of processing, categories of recipients, and retention periods.
(2) Right of access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and to access such data.
(3) Right to rectification: You have the right to request that we correct inaccurate or incomplete Personal Information.
(4) Right to erasure (right to be forgotten): You have the right to request the deletion of your Personal Information under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
(5) Right to restriction of processing: You have the right to restrict processing in cases of inaccuracy, unlawful processing, or where we no longer need the data but you require it for a legal claim.
(6) Right to data portability: You have the right to receive your Personal Information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
(7) Right to object: You have the right to object to processing of your Personal Information, including for direct marketing, and to automated decision-making (including profiling).
(8) Rights regarding automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you.We do not discriminate against you on the basis of exercising any of your rights under the DPA.

Marketing Communications:
You can withdraw consent and opt out of receiving our marketing communications at any time. You can opt-out of receiving our promotional emails or text messages by following the instructions included with the communication or by contacting us. Note that you will still receive transactional messages from us, including information about your account and responses to your inquiries.

Cookies and Tracking Tools:
You can control certain tracking tools.
Your browser may give you the ability to control cookies. How you do so depends on the type of cookie. Certain browsers can be set to reject browser cookies.
You can reject all cookies except functional cookies in our Cookie Preferences center [link if applicable], including to opt out of targeted / behavioral advertising based on information obtained from our website. If you visit us from a different device or browser, or clear cookies, you may need to re-select your preferences.

Mobile Application and Location Based Services:

• If you have previously consented to the collection and use of location-based information through our mobile applications, you may withdraw consent by adjusting the settings on your mobile device.

• You may completely opt-out of all location-based information collection by us if you uninstall all of our mobile apps from your devices.

To exercise any of your rights, you may contact us through the methods below. We will verify your identity using information you have previously provided to us, such as your email address and phone number, or other identifying details. We will acknowledge receipt of your request within 14 days and provide a substantive response within one month (extendable if complex). If we deny your request, we will explain the reasons and inform you of your right to complain to the Office of the Data Protection Commissioner (ODPC).

• Via email at dataprotection@mrofficekenya.com

• Via phone at +254 20 1234567; or

• Online via our Contact Form [link]: Select “Data Protection Rights Request” as the subject of your message and complete and send the form.

You may also authorize an agent to submit a request on your behalf, provided you provide written permission and the agent verifies their identity with us.

Should you need access to this Policy in an alternative format due to a disability, please contact us through the methods provided above.

Right to lodge a complaint: If you believe we have not complied with your rights under the DPA, you may lodge a complaint with the ODPC at complaints@odpc.go.ke or via their website (www.odpc.go.ke) (www.odpc.go.ke).This Platform and children.

Our Platform is meant for adults.
Our website is meant for adults. We do not knowingly collect Personal Information from children under the age of 18 without verifiable parental consent, and we do not process Personal Information of children under the age of 18 for marketing purposes. If you are a parent or legal guardian and think your child has given us information without consent, you can contact us as identified below to request deletion.

Security.

We use standard security measures.
The Internet and information storage are not 100% secure. We cannot guarantee that any of your Personal Information stored or sent to us will be completely safe. We encourage you to use caution. We use reasonable technical, administrative, and physical controls, procedures and practices to safeguard Personal Information under our control, in line with DPA integrity and confidentiality principles. These controls take into consideration the nature of the Personal Information to protect it from unauthorized or illegal access, destruction, use, modification, and disclosure.

To the maximum extent allowed by applicable law, you agree and acknowledge that Mr Office Kenya will not be liable or responsible if any information about you is intercepted, accessed, and/or used by an unintended recipient. If you have reason to believe that the security of your communications or Personal Information has been compromised, please notify us immediately using the contact information below.

We may link to third party sites or services we do not control.

You may be able to access certain third-party sites from our sites or apps.
For example, this may include social media sites or payment gateways. This Policy does not apply to those third-party sites. We strongly advise you to check the privacy policies of all third-party sites you visit to find out how they are treating your Personal Information. We are not responsible for these third parties’ practices.

We may update this Privacy Policy.

From time to time we may change our privacy practices.
We will notify you of any material changes by email (where we have your email) or by posting on our Platform, or otherwise as required by law. We will post an updated copy on our Platform, with a “Last Updated” date at the top of this document. Please check this page for updates. Continued use of the Platform after changes constitutes acceptance.

Feel free to contact us if you have more questions.

To request access to, rectification, deletion, or restriction of your Personal Information, to withdraw consent, to object to processing, or to ask us any questions, you may contact our Data Protection Officer at: Mr Office Kenya
Data Protection Officer
[Your Business Address, e.g., Nairobi, Kenya]

• Email: dataprotection@mrofficekenya.com

• Phone: +254 20 1234567

• Contact Us Form: Select "Privacy Rights Request" as the subject of your message and complete and send [link].

You can also contact us for other questions about how we use your information. For questions not related to rights exercise, you can reach us via the general contact channels on our website. Mr Office Kenya adheres to the principles and requirements of the Data Protection Act, 2019 (DPA) and will register as a data controller with the Office of the Data Protection Commissioner as required. For more information on data protection in Kenya, visit www.odpc.go.ke.