Legal

Privacy Policy

Last updated: [DATE — set when published]

Before this page goes live:

The sections in brackets need input from Elegant Optics — registered business details and a decision on data retention. Everything else reflects what the site's code actually does today. This draft should be reviewed against Kenya's Data Protection Act, 2019 before publishing, ideally by counsel or the ODPC guidance for small data controllers.

1. Who we are

Elegant Optics (“we”, “us”) operates two optical retail and eye-care clinics in Nairobi, Kenya (Karen and Spring Valley/Westlands), and the website at elegantoptics.org. [LEGAL BUSINESS NAME AND REGISTRATION NUMBER]. [REGISTERED BUSINESS ADDRESS]. You can reach us at huzefajamaly60@gmail.com or +254 703 858 595.

2. What we collect

When you use this website, we collect:

Appointment bookings: your name, phone number, chosen branch, and appointment date/time, plus any frames you reserve for a try-on. This is stored in our booking database and used to prepare for your visit.
WhatsApp messages:if you confirm a booking or contact us via WhatsApp, that conversation (including your name and phone number) is visible to our team through WhatsApp, subject to WhatsApp's own privacy terms.
Email sign-ups: if you leave your email to be notified about the online shop, we store that email address to send you that one notification.
Basic site analytics: anonymized performance data (via Vercel Speed Insights) to understand how the site is loading. This does not identify you personally.

3. How we use it

Solely to schedule and honor your appointment, reserve frames you've selected, respond to enquiries, and notify you about the online shop if you asked us to. We do not sell your information, and we do not use it for advertising or share it with third parties beyond the services named above (Supabase for data storage, WhatsApp for messaging, Vercel for hosting and analytics).

4. How long we keep it

[RETENTION PERIOD — e.g. appointment records kept for N months/years for clinical and scheduling continuity, then deleted]. You can ask us to delete your information at any time using the contact details above.

5. Your rights

Under Kenya's Data Protection Act, 2019, you have the right to know what personal data we hold about you, ask us to correct it, ask us to delete it, and object to how it is used. To exercise any of these, contact us at huzefajamaly60@gmail.com or +254 703 858 595.

6. Changes to this policy

If we change how we handle your information, we'll update this page and change the date above.