Centerstar understands that your privacy is important to you and that we care about how your personal data is used. We respect and value the privacy of all our customers and users, and we will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the Data Protection legislation.

This is Centerstar’s Privacy Notice (“Privacy Notice”), which may be accessed at the Centerstar website where you submit personal data to access a service, or obtained as a hard copy when you submit personal data at our branches / outlets. Centerstar is a leading supplier of home and electrical appliances manufactured by leading companies and other suppliers.

We are referred to in this Privacy Notice as “Centerstar”, “we”, “our” or “us”. An individual who is the subject of the personal data is referred to as a “Customer”, “User” or “you”.

This Privacy Notice only covers users of our websites, retail outlets, service centres, marketing, business-to-business and any other divisions in our company that process personal data. Centerstar’s employees’ or third-party vendors’ personal details are handled in line with the terms of the employment agreement or contractual relationships, or our separate policies that we provide as relevant, independent of this Privacy Notice.

 

Information about us

  • Centerstar: a company registered in the Republic of Kenya.
  • Registered address: Groundfloor Spurmall
  • Email address: info@centerstar.co.ke
  • Telephone number: +254111551835
  • Website: centerstar.co.ke

What does this Privacy Notice cover?

This Privacy Notice explains how we use your personal data: how it is collected, how it is held and how it is processed. It also explains your rights under the law relating to your personal data.

We will process any personal data we collect from you in accordance with this Privacy Notice and our Terms and Conditions (together with any other documents referred to in it). Please read this Notice carefully so that you understand how we handle your personal data.

What is personal data?

Processing of personal data is governed by the Data Protection Act, 2019 (“the Act”), the Data Protection (General) Regulations 2021, the Data Protection (Registration of Data Controllers and Data Processors) Regulations 2021, the Data Protection (Complaints Handling and Enforcement Procedures) Regulations 2021 — as may be amended from time to time — and any other regulations made thereunder (collectively, “the Data Protection Legislation”).

Personal data refers to any information about you that enables you to be identified as an individual — such as your name, contact details and identification numbers — but it also covers less obvious information such as electronic location data and other online identifiers.

How do we collect your personal data?

When you visit our websites, retail outlets, corporate services, service centres, marketing, business-to-business and any other divisions in our company — or if you communicate with us by phone, e-mail and social media — we collect personal data about you.

The personal data we collect includes:

  • Personal details such as your name, address, date of birth, email address, phone number and other contact information; transaction information such as the product you purchased, its price, your method of payment and your payment details.
  • Information about you such as your employment details, financial position and information taken from identification documents (like your passport or identification number) when we review a credit application for our services.
  • Your account information — such as dates of payments owed and received, the subscription services you use, or any other information related to your account.
  • The phone numbers that you call / send messages to, or the phone numbers that you receive calls / messages from.
  • The date and time of the calls and messages you send or receive through our network, and your location at the time these communications take place.

When you use our website, the details we collect include:

  • Account data, like the username and password you use to access our website or to buy our products and services.
  • Any relevant detail that you provide in your dealings with us — including when you register to use our online services, or when you subscribe to our offers or services.
  • IP address and Cookie data, which is used as per our Cookie Policy.

The circumstances when you provide personal data could include when you:

  • Purchase products from our websites, retail outlets, corporate services, service centres, marketing, business-to-business and any other divisions in our company.
  • Register or use our website.
  • Request to receive marketing or other communications.
  • Enter one of our competitions or complete one of our customer surveys.
  • Submit information when providing feedback.

How do we use your personal data?

For us to ‘process’ and use your personal data legally, a number of options are available to us under the Data Protection Legislation. The most common bases we rely on are:

  • Contract — to take steps prior to entering a contract, or to fulfil a contract with you.
  • Legal obligation — where we are required to comply with any legal obligation to which we are subject.
  • Legitimate Interest — where we need to pursue an interest as a data controller.
  • Consent — where allowed under the Data Protection Legislation, to send email and text messages about our products, services, competitions, offers, promotions or special events where you tick a box.

No unwanted messages

We will not send you any unsolicited or unlawful marketing messages. We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation.

‘Vital Interests’ can be used as a lawful basis where we need to share your personal data in emergency circumstances, or where it is a matter of life and death.

We will not use your personal data for any purpose other than the purpose(s) for which it was originally collected, unless we reasonably believe another purpose is compatible. If we use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us.

If we need to use it for a purpose that is unrelated to, or incompatible with, the original purpose(s), we will inform you and explain the legal basis, or seek your consent. In some circumstances, where permitted or required by law, we may disclose your personal data without your knowledge or consent — only within the bounds of the Data Protection Legislation and your legal rights.

Your rights under the Data Protection Legislation

Under the Data Protection Legislation, you have the following rights, which we will always work to respect and uphold:

  • The right to be informed about our collection and use of your personal data.
  • The right to access the personal data we hold about you.
  • The right to have your personal data corrected if any of it is false, erroneous or misleading.
  • The right to ask us to delete or otherwise dispose of any of your personal data that we hold.
  • The right to restrict (i.e. prevent) the processing of your personal data.
  • The right to object to our use of your personal data for a particular purpose or purposes.
  • The right to withdraw consent, where we rely on your consent as the lawful basis for using your personal data.
  • The right to data portability — to request your personal data in a structured and commonly used format for your own use across different services.
  • Rights relating to automated decision-making and profiling — we do not use your personal data in this way.

It is important that your personal data is kept accurate and up to date. If any of the personal data we hold about you changes, please keep us informed.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner — though we would welcome the opportunity to resolve your concerns first, so please contact us.

Sensitive personal data

We do not collect any ‘sensitive’ personal data — such as data relating to your race, health status, ethnic or social origin, conscience, belief, genetic data, biometric data, marital status, family details (including names of children, parents or spouses), sex or sexual orientation.

If the need arises in future, we will only collect sensitive data about you with your explicit consent, or if required under the Data Protection Legislation.

We may collect your property details for the purposes of fulfilling our contract with you and delivering the goods and services you have purchased from Centerstar.

In some circumstances, where permitted or required by law, any sensitive personal data we collect will be anonymised or aggregated for statistical and business research purposes — only within the strict bounds of the Data Protection Legislation and your legal rights.

Closed-Circuit Television (CCTV)

We use a CCTV system to capture an overview of our offices / outlets and for the security of those premises.

The lawful basis for processing personal data collected by the system is our legitimate interest, as set out in Section 30(1)(b)(vii) of the Data Protection Act 2019, for the security of our premises, products, customers and visitors.

CCTV data is retained for no more than 45 days, except where an incident has been reported — in which case it is stored for a reasonable period for evaluating and concluding the incident, and then deleted.

We may share CCTV data in limited circumstances:

  • For detection, prevention or resolution of crime in our offices and outlets.
  • Where required to share under any statute or a court order of competent jurisdiction.
  • With authorised third parties.

Do we share your personal data?

All data sharing is undertaken in line with the Data Protection Legislation.

Transfer outside the Republic of Kenya

Subject to one or more appropriate safeguards set out in the Data Protection Legislation, we may transfer your personal data to suppliers and service providers based outside Kenya for the purposes described in this Notice.

We ensure it is protected as if it were being processed in Kenya, that the recipient country has equivalent data protection laws, and that a written contract requires the recipient to protect it to the same standards as Kenya.

Within Centerstar

For administrative and operational purposes, we share data internally across our departments, which need to access it to fulfil our service to you. This sharing is reasonable, in line with the Data Protection Legislation, and respects your rights.

Outside Centerstar

A number of organisations assist us in delivering our services, and from time to time we share, store or handle your information with them to fulfil our contract with you, or where it is in our legitimate interest to do so — for example, external service providers who repair or service the products you purchase.

We are responsible for your personal data and ensure appropriate safeguards are in place.

We are obliged by law to share some personal data with Government, law enforcement agencies and other authorised bodies. Where possible we make this anonymous and only share statistics.

Where your consent is needed to transfer the data, we will make this clear in simple language so you can make an informed decision.

We will never share your information if it is not legal to do so.

We keep your personal data safe

We use a high level of protection — both organisational and technical measures — to ensure we process our customers’ data safely.

Some of these measures are:

  • Servers that meet appropriate standards for security.
  • Access to data via secure log-in, restricted by our IT teams.
  • Buildings and areas accessible only through staff passes, with secure files stored in areas further restricted by passes and keys.
  • Systems available only through strictly controlled security processes, so that only the right people have access.
  • Organisational data-protection policies, and data-protection contracts with third parties with whom we may share your personal data.

How long do we keep your personal data?

We are required under the Data Protection Legislation to keep your personal data only for as long as is lawfully required.

Some of the considerations we take into account when deciding on retention are:

  • Where it is stipulated under the law.
  • The necessary time your data is needed for us to deliver the service to you.

How to contact us

If you wish to contact us regarding any part of this Privacy Notice, have any questions, or would like further information about our handling of your personal data, please contact us:

  • Designation: Data Protection Officer
  • Physical address: Groundfloor Spurmall
  • Email address: info@centerstar.co.ke
  • Telephone: +254111551835

Amendments & changes to your data

We may change, modify or adopt a new Privacy Notice from time to time. If we do so, we will post it on our website. It is your responsibility to check the Privacy Notice every time you submit your personal data to us.

Please keep us informed of any changes to your personal data by emailing full details of the changes to info@centerstar.co.ke