Our short version
We collect only the information we need to take, dispatch and deliver your order, and to send you news if you ask for it. We never sell your data. You can ask us to delete it at any time.
1. Who we are (the data controller)
Pawad Medical Supplies Ltd. is the data controller for the personal data you share with us via this site. We are registered with the Office of the Data Protection Commissioner of Kenya under registration No. ODPC/REG/2023/00781, in accordance with the Data Protection Act, 2019.
2. What we collect
- Account & order details: name, email, telephone, delivery address, order history.
- Payment data: processed by our payment partners (Safaricom M-Pesa, Pesapal). We do not store full card numbers on our servers.
- Communications: messages you send via our contact form, email or telephone.
- Device & usage data: IP address, browser type, pages visited and time on site (collected via privacy-respecting analytics).
3. How we use it
- To process and deliver your order.
- To respond to your enquiries and provide customer support.
- To send order updates and service messages.
- To send marketing emails — only if you have opted in. You can unsubscribe at any time.
- To meet our legal obligations under Kenyan tax and consumer law.
4. Lawful basis
We process your data on the basis of: contract (to deliver your order), legitimate interest (to operate and improve our service), consent (for marketing emails) and legal obligation (e.g. retaining tax records).
5. Sharing
We share data with the following categories of recipient, only as needed:
- Couriers (G4S Courier, Sendy) to fulfil delivery
- Payment processors (Safaricom, Pesapal)
- Hosting and email infrastructure providers
- Professional advisers and regulators when required by law
We never sell your personal data.
6. International transfers
Some of our service providers (e.g. email infrastructure) operate outside Kenya. Where this is the case, we ensure appropriate safeguards are in place in line with the Data Protection (General) Regulations, 2021.
7. How long we keep it
Order records: 7 years (tax law). Marketing contact data: until you unsubscribe. Customer-service correspondence: 24 months. Anything else: only as long as needed for the purpose we collected it.
8. Your rights
- Access a copy of your data
- Ask us to correct or delete your data
- Object to or restrict our processing
- Receive your data in a portable format
- Withdraw consent for marketing at any time
- Lodge a complaint with the Office of the Data Protection Commissioner
To exercise any of these rights, write to privacy@pawadmedical.co.ke.
9. Cookies
We use a small number of essential cookies to remember your bag and to keep your session secure. We use a single, privacy-respecting analytics cookie to understand which pages are most read; this does not identify you personally. You can disable cookies in your browser at any time.
10. Changes to this notice
We will post any changes to this notice on this page and update the “last updated” date above. Material changes will be flagged on the site for at least 30 days.
11. Contact
Questions or requests: privacy@pawadmedical.co.ke.