CLASSIC RESALES PRIVACY POLICY

The protection of personal information is the cornerstone of the relationship between Classic Resales and its clientele. In the digital age, where data is often traded without regard for the individual, we establish this policy to serve as a binding contract of trust. We recognize that our users in Kasarani and beyond require a secure environment to conduct transactions. This document is not merely a formality but a comprehensive framework designed to safeguard every piece of information we collect. Our internal culture prioritizes privacy at every level, from top-tier management to the staff handling daily operations on Thika Road. We believe that by protecting your data, we are protecting the integrity of the resale market itself.

Classic Resales operates as the primary data controller under the laws of the Republic of Kenya. Our physical headquarters, situated in Clay City, serves as the central hub where data processing decisions are made. As a controller, we determine the "why" and "how" of data usage, ensuring that every action taken aligns with the Data Protection Act. We are officially registered to conduct business in the Kasarani area, and our administrative structures are built to reflect our accountability to the Data Commissioner. Any inquiries regarding the legal standing of our entity or the specifics of our registration can be directed to our official email address.

For the purposes of this policy, personal data is defined broadly to include any information that can identify a natural person. This extends beyond simple names and phone numbers to include metadata, IP addresses, and behavioral patterns on our website. We categorize data into "identifying information," "financial records," and "technical signatures." By providing a clear definition, we ensure that users understand exactly what falls under our protection. This includes the subtle nuances of digital footprints left behind during a browsing session on our Thika Road-hosted platform, ensuring no aspect of your identity is left vulnerable.

The language used in this document is intended to be interpreted in accordance with the standard legal lexicon of Kenya. Where terms like "Processing" or "Third-Party" are used, they carry the weight of statutory definitions. We have avoided ambiguous phrasing to prevent any misinterpretation of your rights. This section ensures that in the event of a dispute, the construction of these 47 points remains consistent and transparent. Our goal is to provide a document that is as readable to a layperson as it is to a legal professional, maintaining a standard of clarity that is often missing in corporate privacy statements.

Consent at Classic Resales is never assumed; it is actively sought. When you register or use our services, you are presented with clear options to opt-in to various data processing activities. We utilize "granular consent," meaning you can agree to transactional emails while opting out of marketing updates. This power of choice is fundamental to our operations in Clay City. We keep a digital log of when and how consent was granted, providing a transparent audit trail. Should our processing methods change, we will re-seek your affirmative action rather than relying on outdated permissions.

Users maintain the absolute right to change their minds. We have simplified the process for withdrawing consent to ensure it is as easy to revoke as it was to grant. Whether through a link in an email or a direct request to our WhatsApp line at (+254) 797 088 058, we act promptly on these instructions. Upon withdrawal, we cease the specific processing activity immediately, though we may retain certain data if required by law for tax or auditing purposes. This ensures that you remain the ultimate owner of your personal information throughout your journey with us.

To facilitate a safe resale environment, we collect core identification data. This includes your full legal name, national ID number where necessary for high-value transactions, and physical address within areas like Kasarani. This information allows us to verify that all parties in a transaction are who they claim to be. In the bustling market of Thika Road, identity verification is the first line of defense against fraud. We store this data in encrypted formats, ensuring that even in the unlikely event of a breach, your identity remains shielded from unauthorized eyes.

The phone number and email address you provide are the primary channels for service delivery. We use these to send order confirmations, delivery updates, and security alerts. For instance, if a buyer in Clay City expresses interest in your listed item, our system automatically triggers a notification. We do not sell these contact details to third-party telemarketers. Your phone number is treated as a sensitive key to your account, and we encourage users to keep their contact information updated to ensure they never miss critical security notifications.

When financial transactions occur, we handle data with extreme caution. We do not store full credit card numbers or M-Pesa PINs on our local servers in Kasarani. Instead, we use secure tokens provided by regulated payment gateways. This minimizes the risk of financial theft. Our records only show the "success" or "failure" of a transaction and the last four digits of the payment method for identification. This rigorous approach to financial data ensures that Classic Resales remains a safe platform for commerce in the Kenyan digital economy.

Every time you visit our website, our servers automatically record certain technical information. This includes your device type, operating system, and the time spent on specific pages. This data is used to optimize the website's performance for users on various mobile networks across Kenya. By understanding how users navigate our listings, we can improve the layout and speed of the site. While this data is largely technical, we treat it with the same level of confidentiality as your personal name, recognizing its potential to reveal user habits.

We utilize cookies—small text files stored on your browser—to remember your preferences. This might include your preferred language or the items in your "saved" list. We offer a cookie management tool that allows you to disable non-essential trackers. We distinguish between "strictly necessary" cookies, which allow the site to function, and "analytical" cookies, which help us grow our business. Our transparency regarding these digital tools ensures that you are never being tracked without your knowledge or against your will.

Much of our data processing is justified by the need to fulfill our contract with you. If you sell an item on Classic Resales, we must process your data to facilitate that sale. Without this information, the service simply could not function. This legal basis ensures that we are only asking for information that is directly relevant to the task at hand. It prevents "data creep," where a company collects more than it needs. For our users in Clay City, this means a streamlined experience focused entirely on the successful resale of their goods.

In certain scenarios, we process data based on our "legitimate interests." This might include fraud prevention, network security, or internal administrative tasks. We always conduct a balancing test to ensure our interests do not override your fundamental privacy rights. For example, monitoring for suspicious login patterns is in our interest to protect the platform, but it also benefits the user by securing their account. We are always prepared to explain these interests to any user who requests further clarification.

Classic Resales is bound by the laws of Kenya, which may require us to share data with government agencies. This includes tax reporting to the Kenya Revenue Authority or complying with court orders from the Kasarani law courts. We do not hand over data indiscriminately; we verify the legal validity of every request we receive. Our compliance team ensures that we meet our civic duties while still advocating for the privacy of our users whenever possible. We maintain a log of all such disclosures for our internal records.

To serve the Thika Road community effectively, we may request access to your location data. This helps us show you items for sale in your immediate vicinity, such as Kasarani or Clay City, reducing delivery times and costs. This data is only collected while the app or website is in use and is not used to build a permanent movement profile of our users. You can disable location services at any time through your device settings, though this may limit your ability to find local deals.

When you post a listing or a review, you are providing data that is intended to be public. We process this content to ensure it meets our community guidelines and does not contain prohibited material. While the content is public, we still protect the backend metadata associated with your posts. We advise users to be cautious about including personal details like home addresses in public descriptions. Our role is to provide the platform, but the user maintains responsibility for the information they choose to broadcast.

Not every employee at Classic Resales has access to your information. We implement strict "Role-Based Access Control" (RBAC), meaning a delivery driver only sees the address and phone number needed for a drop-off, while a database admin sees encrypted logs. This "need-to-know" basis minimizes the risk of internal data leaks. Regular audits are conducted at our Kasarani office to ensure that these access rights are up to date and that former employees are immediately stripped of their digital credentials.

We partner with external companies for tasks like cloud hosting, email delivery, and analytics. Before sharing any data with these partners, we conduct a thorough privacy impact assessment. We ensure they have security standards that match or exceed our own. These third parties are contractually forbidden from using your data for any purpose other than the service they provide to Classic Resales. Your data remains under our "umbrella" of protection, even when it is physically stored on a secure server managed by a partner.

While we are based in Kenya, some of our technical infrastructure may reside in other countries. When data leaves Kenya, we ensure it is protected by "Standard Contractual Clauses" or sent to jurisdictions with equivalent privacy laws. This prevents your data from being moved to "tax havens" for information where privacy is ignored. We are committed to maintaining the high standards of the Kenyan Data Protection Act regardless of where the servers are physically located.

We do not keep data forever. We have established clear retention periods based on the type of information. Transactional records are kept for seven years to comply with financial laws, while temporary cookies may be deleted as soon as you close your browser. Once the retention period expires, we use secure deletion methods to ensure the data cannot be recovered. This "storage limitation" principle ensures that our databases do not become a liability for our users in the long term.

Every user has the right to ask for a copy of all data we hold about them. We provide this in a structured, commonly used format like a PDF or CSV. This allows you to not only see what we know but also to move that data to another service if you choose. We respond to these "Subject Access Requests" within the statutory timelines set by Kenyan law. This transparency is a key part of our accountability to the residents of Kasarani and the wider user base.

Inaccurate data can lead to failed deliveries or account issues. If you notice that your phone number or address is incorrect in our system, you have the right to demand an immediate correction. You can usually do this through your account dashboard, but our support team at info@classicresales.co.ke is also available to assist. We ensure that any third parties we have shared the data with are also notified of the correction, maintaining data integrity across the board.

Under certain conditions, you can request that we delete all your personal data from our systems. This applies if the data is no longer necessary for the purpose it was collected or if you have withdrawn your consent. While we must balance this against legal requirements to keep financial records, we strive to honor erasure requests to the fullest extent possible. Once processed, your digital footprint at Classic Resales will be permanently removed, providing you with a "clean slate."

You may ask us to stop processing your data while still keeping it on our servers. This is often used during a dispute—for example, if you challenge the accuracy of the data. During the restriction period, we will store the data but not use it for any other purpose. This provides a "pause button" for your privacy, giving you time to resolve issues without having to delete your entire account history.

Direct marketing can be intrusive. You have an absolute right to object to your data being used for marketing purposes. Every promotional email we send includes a clear "unsubscribe" link. If you object, we will immediately move your details to a "suppression list" to ensure you are not contacted again. This right is independent of our transactional relationship; you can still buy and sell on the platform even if you choose not to receive our newsletters.

We do not use fully automated algorithms to make decisions that have legal or significant effects on our users. If we ever implement AI-driven credit scoring or account suspension tools, we will provide you with the right to human intervention. You have the right to express your point of view and contest any decision made by a machine. This ensures that the human element remains central to our operations on Thika Road.

We employ industry-standard encryption (AES-256) for data at rest and TLS for data in transit. This means that as your information travels from your phone to our servers in Kasarani, it is scrambled into a code that is unreadable to hackers. Our firewalls are constantly updated to block the latest digital threats. We view security as a continuous process of improvement, not a one-time setup.

Privacy isn't just about digital code; it's about physical security. Our offices in Clay City are secured with access controls to prevent unauthorized persons from reaching our hardware or paper records. We maintain a "clear desk" policy to ensure that sensitive user information is never left exposed. By securing our physical environment, we provide a holistic shield for the data you entrust to Classic Resales.

Every member of the Classic Resales team undergoes mandatory privacy training. We teach our staff how to recognize phishing attempts, how to handle sensitive calls, and the importance of confidentiality. We believe that a company's privacy policy is only as strong as its least-informed employee. This culture of awareness ensures that your data is handled with care at every touchpoint.

In the unlikely event of a data breach, we have a rigorous response plan in place. We will notify the Data Commissioner within 72 hours of becoming aware of the breach. If the breach poses a high risk to your rights and freedoms, we will notify you directly via email or SMS. Our priority in such a situation is transparency and damage mitigation, providing you with clear steps on how to protect your account.

Our services are strictly intended for individuals aged 18 and above. We do not knowingly collect data from minors. If we discover that a child has provided us with personal information, we will delete it immediately. We encourage parents in the Clay City area to monitor their children's internet usage and to contact us if they suspect their child has created an account on our platform.

We generally do not collect sensitive data such as ethnic origin, religious beliefs, or health information. If a specific transaction ever requires such data, we will seek your "explicit" written consent and apply even higher levels of encryption. We recognize that this type of information carries greater risk and therefore requires greater protection under the laws of Kenya.

We use anonymized metadata to track business trends. This might include the average price of electronics sold in Kasarani or the most popular time of day for browsing. Because this data is anonymized, it no longer constitutes "personal data" as it cannot be linked back to you. This allows us to improve our business model while maintaining your total anonymity.

If you choose to link your Classic Resales account to social media, those platforms may share certain data with us. Likewise, our site may contain "share" buttons. This point clarifies that we are not responsible for the privacy practices of Facebook, Google, or other third parties. We encourage you to review their policies separately to understand how they handle your information when you interact with our links.

Any information you share in public comment sections or community forums on our site becomes public knowledge. While we moderate these sections for safety, we cannot "un-see" or "un-share" information that has been broadcast to the internet. We urge our users to maintain their own privacy by not posting phone numbers or home addresses in these public spaces.

If Classic Resales is ever sold or merged with another company, your data will likely be one of the transferred assets. However, the new owner will be bound by this same privacy policy. We will notify you of any such change in ownership and give you the opportunity to delete your data before the transfer takes place. This ensures continuity of protection even during corporate transitions.

To prevent financial crimes, we may perform background checks on high-value transactions. This is a legal requirement in Kenya to ensure that our platform is not used for money laundering. We only collect the minimum information required for these checks and do not use this data for any other purpose. This protects the reputation of Classic Resales and the safety of our honest users.

Our KYC procedures are designed to verify the legitimacy of our sellers. This might involve asking for a photo of a government ID or a business permit. For our sellers in Kasarani, this builds trust with potential buyers. These documents are stored in a high-security digital vault and are only accessed by our compliance officers during the verification process.

We maintain a "Record of Processing Activities" (ROPA) as required by law. This internal document tracks every flow of data within Classic Resales. While the ROPA is a technical document, this privacy policy serves as its public-facing summary. We are committed to being an "open book" regarding our data practices, ensuring there are no hidden processes or "dark patterns."

When you call our official number (+254) 797 088 058, we may record the conversation for training and quality purposes. You will be notified at the start of the call if recording is active. These recordings are deleted after a short period unless they are needed for a specific dispute resolution. This helps us maintain a high standard of customer service for the Clay City community.

To protect your account, we use email verification for all new registrations. This ensures that the email address provided actually belongs to you. We also monitor for "spoofing" or "phishing" emails that claim to be from Classic Resales. Always check that emails are coming from the @classicresales.co.ke domain before clicking on any links or providing information.

If you have a complaint about how your data has been handled, we ask that you contact us first at info@classicresales.co.ke. We have a dedicated privacy team that will investigate your concern and provide a written response. If you are not satisfied with our resolution, you have the right to lodge a formal complaint with the Office of the Data Protection Commissioner in Kenya.

This policy is governed by and construed in accordance with the laws of Kenya. Any legal actions arising from this policy will be subject to the exclusive jurisdiction of the Kenyan courts. This provides a clear legal framework for both the company and the user, ensuring that rights are enforceable within our local legal system.

We will not discriminate against you for exercising your privacy rights. Whether you opt out of marketing or request the deletion of your data, you will still receive the same quality of service and the same prices as any other user. We believe that privacy is a right, not a luxury that should be traded for better service.

The digital world moves fast, and so does the law. We review this policy at least once a year to ensure it remains accurate. When we make significant changes, we will post a notice on our homepage or send you an email. Your continued use of the site after such changes constitutes your acceptance of the new terms.

We are committed to making this privacy policy accessible to everyone. If you require this document in a different format or need help understanding any of these 47 points, please contact us. We believe that transparency is only effective if the information is actually understandable to the people it affects.

For any questions, concerns, or requests regarding your personal data, you can reach the Classic Resales team at our headquarters on Thika Road, Kasarani, or via our digital channels. Our phone number is (+254) 797 088 058 and our email is info@classicresales.co.ke. By using our platform, you affirm that you have read and understood these 47 points and agree to be bound by them. We thank you for trusting us with your business and your data in the vibrant community of Clay City.