Privacy & data protection

What we collect and why

Your account

Name, phone, email, town, trade and (for businesses) business name — so we can serve you, price your order correctly and call you about delivery.

Orders and quotes

What you bought or asked us to quote, the amounts, and the delivery point you pinned — kept as our business records, which the law requires us to keep.

Shop activity

Which products you opened, added to the basket or searched for. This is used only in aggregate, so we stock what customers actually want. Decline analytics cookies and we stop recording it.

Sign-in records

The time you signed in and the page you landed on, kept for account security and to spot misuse.

We never store card numbers or M-Pesa PINs. Payment is confirmed by our staff on the till — this website never sees your payment credentials.

How we keep it safe

• All traffic is encrypted in transit (HTTPS) and data is encrypted at rest.
• Every table enforces row-level security: you can only ever read your own orders, quotes, points and messages — even directly through the API.
• Staff powers come from a separate roles table checked on the server, so nobody can grant themselves access from the browser.
• Quote workings, staff notes and internal supplier names are stored where customers cannot read them at all.
• Product photos are served through signed, expiring links, not open buckets.
• Internal database routines are locked to the system itself and cannot be called by visitors.
• We collect the minimum we need, and staff access is limited to the people who need it to do their job.

How long we keep it

Order and quote records are kept for seven years as required for tax and accounting. Shop-activity records are kept for 24 months and then removed. Account details are kept while your account is open, and deleted on request unless we must keep a transaction record.

Your rights

You may ask to see your data, correct it, delete it, or object to it being used for insight. We reply within 7 days. You may also complain to the Office of the Data Protection Commissioner.

Contact

Data protection queries: 0725 878 257 · greenhardware6@gmail.com. See also our delivery & returns policy.