Website Data Protection Policy

Happy Cow Ltd ("Happy Cow", "we", "us", or "our") is committed to protecting your personal data. This Website Data Protection Policy explains how we collect, use, store, and safeguard your information when you visit our website or interact with our online services. It applies to all visitors, customers, and users of our website, regardless of location.

This policy is compliant with the Data Protection Act, No. 24 of 2019 of Kenya. By using our website, you consent to the practices described in this policy. We encourage you to read this policy carefully and contact us if you have any questions.

When you visit our website, we may collect personal data — information that can identify you directly or indirectly. This includes your name, email address, phone number, and physical address. If you make a purchase, we also collect payment and billing details. Automatically, we gather technical data such as your IP address, browser type, and device information. You may also voluntarily provide additional information through contact forms, surveys, or account registration. We only collect data that is necessary for the specific purpose for which it was intended, and we do not use it beyond that scope.

We only process your personal data where there is a lawful basis: your consent, a contractual requirement, a legal obligation, or a legitimate business interest. Specifically, we use your data to respond to your enquiries, process and deliver your orders, improve our website and services, comply with the law, and detect or prevent fraud or security issues. If we wish to send you marketing communications such as newsletters or promotions, we will only do so with your express consent. Where possible, any data used for analytics or research will be anonymised so that you cannot be identified.

We do not sell your personal data to any third party. We may share your data with trusted external service providers (such as payment processors or hosting providers) who process data on our behalf and under our instructions. In such cases, we remain responsible for the security and appropriate use of your data.

We may also disclose your data where required by law, by a court order, or to protect the vital interests of any person. We will not transfer your personal data outside Kenya unless adequate data protection safeguards are in place or you have given your consent.

We use encryption for sensitive data both in transit and at rest, restrict data access to authorised personnel through role-based controls, and require multi-factor authentication for critical systems. Our infrastructure is protected by firewalls and intrusion detection systems, with secure remote access via VPN. We perform regular backups for disaster recovery, maintain anti-virus and anti-malware protection on all devices, apply security patches promptly, and restrict physical access to our servers and data centres. While no online system is entirely risk-free, we take every reasonable measure to safeguard your information. If you have any concerns about data security, please contact us.

We keep your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Once your data is no longer needed, it will be securely deleted or anonymised in accordance with our data retention schedule.

Under the Data Protection Act, 2019, you have the right to be informed about how your data is used, to access a copy of the personal data we hold about you, and to object to the processing of all or part of your data. You may also request correction of any inaccurate or misleading data, or request deletion of data that is no longer necessary or was collected unlawfully. Additionally, you have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider; we will respond to such portability requests within thirty (30) days at reasonable cost. You may also ask us to restrict how we use your data, for example while the accuracy of your information is being verified. If you are under 18 years of age, your parent or guardian may exercise these rights on your behalf. To exercise any of these rights, please contact our Data Protection Officer using the details at the end of this policy.

If your personal data is accessed, acquired, or disclosed by an unauthorised person, and there is a real risk of harm to you, we will notify you in writing within a reasonably practical period. This notification will include a description of the breach, the measures we are taking to address it, and recommendations for steps you can take to protect yourself.

We will notify our Data Protection Officer immediately upon becoming aware of any breach, and we will maintain a record of all breaches, their effects, and the remedial actions taken.

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small files stored on your device that help us understand how you use our site, remember your preferences, and improve our services. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

We do not knowingly collect personal data from children under the age of 18 without verified parental or guardian consent. Where we process a minor's data, we implement appropriate age verification and consent mechanisms proportionate to the volume and sensitivity of the data processed, and we ensure that processing protects and advances the child's rights and best interests.

We may update this Data Protection Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be communicated through our website. We encourage you to review this policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Data Protection Policy or how we handle your personal data, please contact our Data Protection Officer:

Data Protection Officer
Happy Cow Ltd
Email: Loading email…
Phone: 0717 118 380