Order now
KE

How we handle your personal data

Last updated:

Site operator Ergofisio Italia S.r.l.
Address Via Montenapoleone 8, Brera
20121 Milano, Italia

Who controls your data

The data controller for your personal data under the Data Protection Act, 2019 is the company named in the details box above. For any question about your data, write to the email in that box.

What data we collect

The order form collects your name and mobile number. With each request we also record the IP address, the date and time, the page you came from and any advertising tags in the link, such as the UTM tags of a campaign.

You give your delivery address to the operator on the confirmation call. We do not collect card details, bank details or mobile money PINs.

Why we use it

We use your data to handle the order you asked for: the confirmation call, dispatch, delivery and any questions afterwards. The legal basis is your consent, given when you send the form, and the steps needed to carry out the order you requested, under section 30 of the Data Protection Act, 2019.

The IP address and advertising tags help us filter out fake requests and see which campaigns bring orders. We do not build marketing profiles from your data or make automated decisions about you, and we do not knowingly take orders from anyone under 18.

Who receives it

Order data goes to the product's official distributor in Kenya, which makes the confirmation call and arranges dispatch, and to the courier that delivers the parcel. Each receives only the data it needs for its part of the order.

The company that runs the site is based outside Kenya, so your data may also be processed abroad. Such transfers take place only with the safeguards that section 48 of the Act requires. We do not sell your data or pass it to anyone for advertising.

How long we keep it

Data from a completed order is kept while the order and any after-delivery questions are handled, and then for as long as tax and accounting law requires. Data from requests that were never confirmed is deleted or anonymised once it no longer serves its purpose, as section 39 of the Act requires.

Your rights

Under sections 26 and 40 of the Data Protection Act, 2019 you can ask how your data is used, get access to it, object to its processing, and have inaccurate, out-of-date or misleading data corrected or deleted. You can withdraw your consent at any time; under section 32, this does not affect processing done before you withdrew it.

Send requests to the email in the details box above, with the mobile number you used on the form. If our reply does not settle the matter, you can complain to the Office of the Data Protection Commissioner under section 56 of the Act.

Cookies

The site uses only technical cookies that the pages and the order form need to work. They do not track you for advertising.