Privacy Policy

01Who We Are & Our Commitment to Privacy

This Privacy Policy is issued by Dong Solar Limited (“Dong Solar Kenya”, “we”, “us”, “our”), the owner and operator of dongsolar.co.ke. We are a solar energy company registered and operating under the laws of the Republic of Kenya.

We are committed to handling your personal data responsibly, transparently, and in full compliance with the Kenya Data Protection Act (2019) and all other applicable data protection regulations.

02What Information We Collect

We collect two categories of information: personal data you provide to us directly, and non-personal technical data collected automatically when you use our website.

Personal Data You Provide:

• Identity Information: Full name, company name (for corporate clients).
• Contact Information: Email address, phone number, physical or delivery address.
• Account Information: Username and password if you create an account on our website.
• Order & Transaction Information: Products purchased, order history, payment method used, and transaction reference numbers.
• Communications: Any messages, enquiries, or feedback you send us via our contact form, email, or WhatsApp.

Technical Data Collected Automatically:

• IP address, browser type and version, operating system, and device type.
• Pages visited, time spent on each page, referral URLs, and clickstream data.
• Cookie identifiers and session data (see our Cookies section below).

03How We Use Your Information

We use your personal data only for the purposes for which it was collected, or for compatible purposes as permitted by law. Specifically, we use your data to:

• Process and fulfil your orders, including managing payments, arranging delivery, and coordinating installation services.
• Create and manage your account on our website, if applicable.
• Provide customer support and respond to your enquiries, complaints, or warranty claims.
• Send transactional communications such as order confirmations, invoices, delivery updates, and payment receipts.
• Send marketing communications about our products, promotions, and services — only where you have given us your consent to do so. You may opt out at any time.
• Improve our website and services by analysing usage patterns, identifying technical issues, and understanding customer preferences.
• Comply with legal obligations, including tax records, financial reporting, and responding to lawful requests from regulatory authorities.
• Prevent fraud and ensure security of our website and payment systems.

04Sharing Your Information

Dong Solar Kenya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Payment Processors: We share necessary transaction data with Pesapal, Safaricom (M-Pesa), and our banking partners solely to process your payments securely.
• Delivery & Logistics Partners: We share your name, phone number, and delivery address with our courier or logistics partners to fulfil your order.
• Installation Teams: For installation orders, relevant contact and site details are shared with our certified installation technicians.
• IT & Platform Providers: Our website hosting, analytics, and email service providers may process limited technical data in the course of providing their services to us.
• Legal & Regulatory Authorities: We may disclose your data where required to do so by law, court order, or in response to a lawful request from a government or regulatory body.

All third parties with whom we share your data are bound by confidentiality obligations and are required to process your data only for the specified purpose and in accordance with applicable data protection laws.

05Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law. Our general retention guidelines are as follows:

• Order & Transaction Records: Retained for a minimum of 7 years to comply with Kenyan tax and financial record-keeping requirements.
• Customer Account Data: Retained for as long as your account remains active. If you close your account, we will delete or anonymise your data within 90 days, unless we are required to retain it for legal or regulatory reasons.
• Marketing Communications: Retained until you withdraw your consent or unsubscribe, after which your details will be removed from our marketing lists promptly.
• Warranty & After-Sales Records: Retained for the duration of the applicable warranty period and up to 2 years thereafter.

When personal data is no longer required, we will securely delete or anonymise it in accordance with our data disposal procedures.

06Data Security

We take the security of your personal data seriously and have implemented a range of technical and organisational measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure.

• Our website uses 256-bit SSL (Secure Socket Layer) encryption for all data transmission.
• Access to personal data is restricted to authorised staff members who require it to perform their duties, and is subject to strict confidentiality obligations.
• Payment data is handled exclusively by PCI-DSS compliant payment processors. We do not store card numbers, PINs, or CVV codes on our servers.
• We conduct periodic reviews of our data security practices and update them as necessary to address new threats or vulnerabilities.

07Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and support certain website features. A cookie is a small text file placed on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Necessary for the website to function correctly, including maintaining your shopping cart, session management, and account login. These cannot be disabled.
• Analytics Cookies: Used to collect anonymous data about how visitors use our website (e.g. pages visited, time on site) to help us improve user experience.
• Marketing & Tracking Cookies: Used to track website visits for retargeting and advertising purposes (e.g. Facebook Pixel). These are only activated with your consent.

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of our website.

08Your Rights as a Data Subject

Under the Kenya Data Protection Act (2019), you have the following rights with respect to your personal data held by Dong Solar Kenya:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes it was collected, subject to our legal obligations to retain certain records.
• Right to Restrict Processing: You have the right to request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transfer it to another data controller.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

09Children’s Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a child under 18, we will take prompt steps to delete that information.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at admin@dongsolar.co.ke and we will address the matter promptly.

10Links to Third-Party Websites

Our website may contain links to third-party websites, including those of product brands, payment gateways, and partner organisations. This Privacy Policy applies solely to data collected by Dong Solar Kenya and does not cover how third-party websites handle your information.

We encourage you to review the privacy policies of any third-party websites you visit. Dong Solar Kenya is not responsible for the privacy practices or content of external sites.

11Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Kenya, including the Data Protection Act (2019) and regulations made thereunder.

Any disputes arising from or related to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Kenya. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya if you believe your data protection rights have been infringed.

12Changes to This Privacy Policy

Dong Solar Kenya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we provide. All updates will be posted on this page with a revised “Last Updated” date.

Where changes are significant, we will endeavour to notify you directly by email or through a prominent notice on our website. We encourage you to review this policy periodically. Your continued use of our website or services following any changes constitutes your acceptance of the updated policy.

13Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please do not hesitate to get in touch with us.

Have a question about your data or want to exercise your privacy rights?
Our team is ready to assist — we typically respond within one business day.