Privacy policy

Maroo Polymers Ltd is based in Nairobi, Kenya. For any privacy question or to exercise your rights, contact us at hello@marooproducts.comwith “Privacy” in the subject line, or write to us at our Nairobi office. We will respond within the timeframes required by law (generally within 30 days).

We only collect data we need for the purposes described below. Depending on how you use the site, this may include:

• Contact & enquiry details— your name, email address, phone number, company/trade name and the contents of messages you send through our consultation, quote, contact and review forms.
• Quote & project details— the products, colours, quantities and project information you provide so we can prepare a quote or connect you with a stockist.
• Account & security data(trade/portal users) — your login email, a securely hashed password, your role, two-factor authentication settings, and security events such as sign-in times used to protect your account.
• Stockist information— for partners who list with us: business name, contact details and shop location (address and map coordinates) shown in the stockist finder.
• WhatsApp voice notes— if you send us a voice message, we process that audio to handle your enquiry. It is handled securely and kept only as long as needed to respond.
• Location data— if you use the stockist finder, we may use your approximate location (only with your browser’s permission) to show nearby stockists. Addresses you enter are geocoded into coordinates by our mapping provider.
• Usage, device & analytics data— pages visited, referring links, approximate device/browser information and similar analytics, collected subject to your cookie choices.
• Technical & security data— IP address and request metadata used for security, anti-fraud, bot protection and to keep the service reliable.

We do not intentionally collect special-category data (such as health or ethnicity). Please do not include such information in free-text fields.

• Respond to enquiries and prepare quotes/consultations— to take steps at your request and to pursue our legitimate interest in serving customers.
• Operate the trade portal and your account— to perform our contract with trade partners and keep accounts secure.
• Run the stockist finder— to show relevant stockists, based on your consent (for precise location) or legitimate interest.
• Send service messagesby email or WhatsApp — e.g. quote follow-ups and account/security notices, to perform our contract or on legitimate interest.
• Analytics and marketing measurement— to understand and improve the site and our campaigns, based on your consent via the cookie banner.
• Security, anti-abuse and error monitoring— bot protection, rate-limiting and diagnosing faults, in our legitimate interest in protecting the service and to meet our security obligations.
• Legal compliance— to comply with applicable law, accounting and to establish, exercise or defend legal claims.

Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you can object (see “Your rights”).

We use strictly necessary cookies to run the site (for example, to keep you signed in and to protect forms against cross-site request forgery). With your consent we also use analytics and marketing cookies. You can change or withdraw your choices at any time via the cookie banner. See our Cookie policy for details.

We do not sell your personal data. We share it only with trusted service providers who process it on our instructions and under appropriate confidentiality and data-protection terms, in the following categories:

• Hosting and infrastructure providers that operate the website and store our data.
• Security and fraud-prevention providers that help protect our forms and services from abuse.
• Analytics and performance-monitoring providers that help us understand usage and diagnose faults (used subject to your consent where required).
• Advertising and conversion-measurement providers, and sign-in providers, where you choose to use them or consent to them.
• Mapping and location providers that power the stockist finder.
• Communication providers that deliver our email and messaging notifications.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety and property of Maroo, our users or others. A more detailed list of the specific providers we use is available on request.

Some of our providers process data outside Kenya (for example, in the European Union or the United States). Where personal data is transferred across borders, we take steps required by the Kenya Data Protection Act, 2019 and applicable law — such as ensuring an adequate level of protection or putting appropriate safeguards (for example, standard contractual clauses) in place.

We keep personal data only for as long as necessary for the purpose we collected it, including to meet legal, accounting or reporting obligations. As a guide: enquiry and quote records are kept while we are in contact and for a reasonable follow-up period; account data is kept while your account is active; WhatsApp voice notes are kept only transiently to handle your enquiry; and analytics data is retained for limited periods. When data is no longer needed, we delete or anonymise it.

We use appropriate technical and organisational measures, including encryption in transit, secure password hashing, two-factor authentication for staff and trade accounts, access controls and ongoing security monitoring. No system is completely secure, but we work to protect your data and to detect and respond to incidents.

Subject to applicable law, you have the right to:

• be informed about how your data is used;
• access a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion of your data (“right to be forgotten”);
• restrict or object to certain processing, including direct marketing;
• data portability; and
• withdraw consent at any time, without affecting prior processing.

To exercise any of these, email hello@marooproducts.com. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya (odpc.go.ke) or, in the EEA/UK, your local data protection authority.

This website and our services are intended for adults and trade customers. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

We may update this policy from time to time. We will post the updated version here and change the “last updated” date above. Material changes will be made clear. Please check back periodically.