Privacy Policy

This policy explains how Jo Mi Gi Mor Holdings Limited (JMG Smart Living), JMG Smart Hub, Mutarakwa Road, off Outering Road, Nairobi, collects and uses personal data as a data controller under the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. Questions or requests: feedback@jmgsmartliving.co.ke.

1. Personal data we collect

• Identity and contact: name, phone number, e-mail address.
• Location: delivery and site addresses (county, constituency, ward, landmark) and map pins you choose to share.
• Transactions: orders, quotations, payments, receipts, invoices and refunds. We do not receive or store your M-PESA PIN or full card number.
• Project information: measurements, photographs, site survey findings and files you upload.
• Communications: messages, calls, reviews and support requests.
• Technical data: IP address, device and browser information, and security signals from Cloudflare.

2. Why we use it and our lawful basis

• Processing orders, deliveries, installations and support: performance of a contract.
• Tax records, eTIMS invoicing and accounting: legal obligation.
• Fraud prevention, website security and service improvement: legitimate interests.
• Marketing messages and offers: your consent, which you can withdraw at any time.

3. Sharing

We share only what is necessary with payment providers and banks, delivery partners, the technicians or artisans assigned to your job, SMS and e-mail providers, and cloud hosting and security providers, all bound by confidentiality and data-processing terms. We disclose data to authorities only where the law requires. We do not sell personal data.

4. International transfers

Some of our service providers host data outside Kenya. We use them only where appropriate safeguards are in place, as required by section 48 of the Data Protection Act, 2019.

5. Retention

Financial and tax records are kept for at least five years, as required by the Tax Procedures Act, 2015. Account and order data is kept while your account is active and for a reasonable period afterwards to handle warranties and disputes. It is then deleted or anonymised.

6. Your rights

You may ask to be informed of how your data is used, access it, correct it, delete it, object to or restrict processing, and request portability. Use your account settings or e-mail feedback@jmgsmartliving.co.ke. We respond within the timelines set by the Act. You may also complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

7. Security

We use encryption in transit, role-based staff access, database row-level security, audit logging and Cloudflare protection. No system is perfectly secure; we will notify you and the Data Commissioner of a qualifying breach as the law requires.

8. Children

Our services are not directed at children under 18, and we do not knowingly collect their data.

9. Changes

We will post updates to this policy here and, for material changes, notify account holders.