Privacy Policy
PRIVACY POLICY – GYMDRIP
Effective Date: 30 March 2026
GymDrip (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with applicable laws in Kenya.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or make a purchase from our website.
1. INFORMATION WE COLLECT
We may collect the following types of personal data:
a) Personal Information
- Full name
- Email address
- Phone number
- Shipping and billing address
b) Payment Information
- Payment details processed securely via third-party providers (e.g., Paystack)
- Note: We do not store your card or payment details
c) Technical Data
- IP address
- Browser type and device information
- Website usage data (pages visited, time spent, clicks)
d) Account Information (if applicable)
- Login credentials
- Order history and preferences
2. HOW WE USE YOUR INFORMATION
We use your data to:
- Process and fulfill orders
- Communicate with you regarding purchases, deliveries, and support
- Improve our website, products, and user experience
- Send marketing communications (only with your consent)
- Detect and prevent fraud or unauthorized activities
- Comply with legal and regulatory obligations
3. LEGAL BASIS FOR PROCESSING
In line with the Data Protection Act (Kenya), we process your data based on:
- Your consent
- Performance of a contract (e.g., fulfilling your order)
- Compliance with legal obligations
- Legitimate business interests
4. SHARING YOUR INFORMATION
We may share your information with:
- Payment processors (e.g., Paystack)
- Delivery and logistics partners
- IT service providers (hosting, analytics tools)
- Legal or regulatory authorities when required by law
We ensure that all third parties handle your data securely and in compliance with applicable laws.
5. DATA RETENTION
We retain your personal data only for as long as necessary to:
- Fulfill the purposes outlined in this policy
- Comply with legal, tax, and regulatory requirements
6. YOUR RIGHTS
Under Kenyan data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
To exercise your rights, contact us using the details below.
7. DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal data against:
- Unauthorized access
- Loss or theft
- Misuse or alteration
However, no system is completely secure, and we cannot guarantee absolute security.
8. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to:
- Enhance user experience
- Analyze website performance
- Personalize content and offers
You can manage cookie preferences through your browser settings.
9. THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.
10. CHILDREN’S PRIVACY
Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
12. CONTACT US
If you have any questions or wish to exercise your data rights, please contact us:
GymDrip
Email: support@gymdrip.com
