MicMikes Paints← Back to Shop

Privacy Policy

Last Updated: July 9, 2026 · Compliant with the Kenya Data Protection Act, 2019

1. Introduction & Compliance

MicMikes Paints (“we”, “our”, or “us”) is a premium Kenyan paint brand. We are committed to protecting the privacy and personal data of our customers (“you” or “data subject”) in accordance with the Kenya Data Protection Act, 2019 (DPA).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, upload photos to our Room Visualizer, order paint, or pay using M-Pesa.

2. Personal Data We Collect

To fulfill your orders and support interactive features, we collect the following categories of personal data:

  • Contact Information: Full name, email address, and phone number (primarily your M-Pesa registered number).
  • Order Reference: Your order details are recorded for fulfilment and collection notification purposes. No delivery address or GPS coordinates are required or collected at this time.
  • Financial Transaction Data: Safaricom M-Pesa transaction reference numbers and payment status. We do not store credit card numbers or PINs.
  • Visual Media: Photos of your rooms that you upload to use our Room Visualizer. These photos are processed to show paint overlays.
  • Technical Data: Browser cookies, IP address, and usage data collected via performance and analytics tools.

3. Lawful Bases for Processing

Under Section 30 of the DPA, we process your personal data using the following legal bases:

  • Consent: When you opt-in to marketing communications, accept analytical cookies, or upload photos to the Room Visualizer.
  • Performance of a Contract: To process your order, receive payment via M-Pesa, and notify you when your order is ready for showroom collection.
  • Legal Obligation: To maintain transaction records and file VAT tax returns with the Kenya Revenue Authority (KRA).

4. How We Use and Share Your Data

We use your data strictly to facilitate the MicMikes Paints experience. We share your data only with verified service providers necessary to run our service:

  • Safaricom M-Pesa: To trigger payment STK push prompts and verify transactions.
  • Hosting & Database: Vercel and Neon Postgres DB, which store your orders securely.

We never sell, rent, or trade your personal data with third parties for marketing purposes.

5. Your Rights as a Data Subject

The Kenya Data Protection Act, 2019 grants you specific rights over your personal data (Sections 26 to 40):

Right to Be Informed
You have the right to know how your personal data is collected and processed.
Right of Access
You can request a copy of the personal data we hold about you at any time.
Right of Rectification
You have the right to correct inaccurate, outdated, or incomplete data.
Right to Erasure (Deletion)
You can request that we delete personal data we no longer have a legal basis to retain.

🛡️ Data Subject Rights Portal

Kenyan residents can use this self-service compliance portal to instantly download their customer data or request account erasure from the database.

6. Contact the Data Protection Officer

If you have any questions about this Privacy Policy, your rights under the Kenya DPA 2019, or our data handling practices, please contact us:

Entity: MicMikes Paints Limited
Office Location: Keekorok Road, Nairobi, Kenya
Helpline: 0712 345 678