Effective Date: Thursday, August 22, 2024

Introduction
This Privacy Policy explains how www.aparinehealth.com ("we," "us," "our") collects, uses, discloses, and protects your personal information when you visit or make a purchase from our website. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act of Kenya, 2019.

1. Information We Collect

1.1. Personal Data
When you visit, register on our site, or make a purchase, we may collect the following types of personal data:

• Identification Information: Name, email address, phone number, and postal address.
• Financial Information: Payment details, including credit/debit card information.
• Account Information: Username, password, and purchase history.
• Technical Information: IP address, browser type, and operating system.
• Health Information: Any data you provide related to your health for personalized product recommendations.

1.2. Non-Personal Data
We may also collect non-personal data, such as browsing habits, referring URLs, and the pages you access on our site.

2. How We Use Your Information

2.1. To Provide Services

• Process and fulfill your orders, including delivering products and processing payments.
• Provide you with personalized product recommendations and consultations.
• Manage your account and communicate with you regarding your purchases.

2.2. To Improve Our Services

• Analyze website usage to improve user experience and website functionality.
• Conduct surveys and market research to enhance our product offerings.

2.3. Legal Compliance

• Comply with legal obligations under the GDPR, Data Protection Act of Kenya, and other applicable laws.
• Protect against and prevent fraud, unauthorized transactions, and other liabilities.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations to you when you make a purchase or register an account.
• Consent: For specific processing activities where you have given us your explicit consent, such as receiving marketing communications.
• Legitimate Interests: For activities like fraud prevention, direct marketing, and improving our services.
• Legal Obligation: To comply with legal requirements, such as tax reporting and other regulatory mandates.

4. How We Share Your Information

4.1. Service Providers
We may share your personal data with third-party service providers who perform functions on our behalf, such as payment processing, order fulfillment, and data analytics. These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2. Legal Requirements
We may disclose your information if required by law or in response to valid legal requests by public authorities, such as law enforcement agencies.

4.3. Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity.

5. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Kenya, including countries that may not have the same data protection laws as Kenya. We ensure that appropriate safeguards are in place to protect your data during such transfers, in compliance with GDPR and the Data Protection Act of Kenya.

6. Data Security

We implement industry-standard security measures to protect your personal data from unauthorized access, use, or disclosure. These measures include:

• Encryption: We use SSL encryption to protect sensitive data during transmission.
• Access Controls: Access to your data is restricted to authorized personnel only.
• Data Minimization: We only collect and retain the minimum amount of personal data necessary for our purposes.

7. Your Rights

Under GDPR and the Data Protection Act of Kenya, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your data, subject to certain conditions.
• Right to Restriction: You can request a restriction on the processing of your data under certain circumstances.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format.
• Right to Object: You can object to the processing of your data for direct marketing or other legitimate interests.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time.

To exercise these rights, please contact us at info@aparinehealth.com

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations. When your data is no longer needed, we will securely delete or anonymize it.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

10. Children’s Privacy

Our website is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child, we will take steps to delete such data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page, and the "Effective Date" will be updated accordingly. Your continued use of the website after any changes signifies your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us

This Privacy Policy ensures that your personal information is handled with the utmost care, in compliance with the GDPR and Data Protection Law of Kenya. Thank you for trusting www.aparinehealth.com with your health and wellness needs.