At Galaxy Brandstore, we respect your privacy. This policy explains what personal data we collect when you visit our shop or website, buy from us or use our repair service, how we use it, who we share it with, and your rights under Kenya’s Data Protection Act, 2019.
This policy covers personal data collected through:
“We”, “us” and “our” mean Galaxy Brandstore only, not Samsung Electronics Co., Ltd. or its affiliates.
We collect only what we need.
We do not collect sensitive personal data such as health or biometric data, and we do not ask for or keep copies of government ID.
| Purpose | Legal basis |
|---|---|
| Processing orders, payments, deliveries and pickups | Contract |
| Registering your warranty with Samsung and handling warranty claims | Contract |
| Carrying out and documenting repairs | Contract |
| Answering questions and giving support | Contract / legitimate interest |
| Keeping tax and accounting records | Legal obligation |
| Shop security and preventing fraud or theft (including CCTV) | Legitimate interest |
| Improving our website and services (analytics) | Consent / legitimate interest |
| Showing you our ads on Google, Facebook, Instagram and TikTok, and measuring them | Consent |
| Sending our newsletter and offers | Consent (unsubscribe at any time) |
We do not sell your personal data. We share it only as needed for the purposes above:
| Who | Why | What |
|---|---|---|
| Samsung | To register your device warranty and process warranty claims on your behalf | Name, contact details, device model, serial/IMEI, purchase date |
| PesaPal | To process M-Pesa and card payments | Payment details and order amount |
| Courier and delivery partners | To deliver your order | Name, phone number, delivery address |
| Google (Analytics, Ads, Merchant Center) | Website analytics, advertising and product listings | Website usage data, cookie identifiers, purchase events |
| Meta (Facebook, Instagram, WhatsApp) | Advertising measurement, and WhatsApp chats you start with us | Website usage data, cookie identifiers, purchase events; your WhatsApp messages |
| TikTok | Advertising measurement | Website usage data, cookie identifiers, purchase events |
| Mailchimp | Sending our newsletter | Your email address, only if you sign up |
| Our website host and security providers | Running and protecting our website | Data stored on or passing through our website |
| Authorities | When required by Kenyan law or a court order | Only what is legally required |
Some of these providers (for example Samsung, Google, Meta, TikTok and Mailchimp) store or process data outside Kenya. Where this happens we rely on the safeguards allowed under the Data Protection Act, 2019, and we choose providers that protect personal data and use it only for the stated purpose.
| Data | Kept for | Why |
|---|---|---|
| Purchase and transaction records | 7 years | Kenyan tax and accounting law |
| Warranty registration data | Length of the warranty + 1 year | Warranty claims and disputes |
| Repair records | 1 year after the repair | Repair warranty and support |
| Customer contact details | 3 years after your last contact with us | Customer support |
| Newsletter consent | Until you unsubscribe + 1 year | Proof of consent |
| CCTV footage | 30 days | Security. Deleted unless needed for an incident |
After this, data is securely deleted or anonymised. You can ask us to delete your data earlier where the law does not require us to keep it.
No system is 100% secure. If a data breach is likely to put your rights at risk, we will tell you without undue delay and report it to the Office of the Data Protection Commissioner as the law requires. Please contact us straight away if you suspect your information has been misused.
During a repair, our technicians may need to switch on and test your device. We do not copy, view or keep your personal content (photos, messages, files) beyond what is needed to test the repair. Please back up your data and remove any SIM or memory cards before handing in your device.
Under the Data Protection Act, 2019 you have the right to:
To use any of these rights, email info@galaxybrandstore.com, call 0712 939 925 or visit our shop. We will reply within 30 days. There is no charge, unless a request is clearly unfounded or excessive.
Our website and services are not aimed at children under 18. We do not knowingly collect personal data from children without a parent’s or guardian’s consent. If you believe we have, contact us at info@galaxybrandstore.com and we will delete it.
We may update this policy when our practices or the law change. The “Last updated” date at the top shows when it last changed. For important changes, we will place a notice on our website.
Galaxy Brandstore
Superior Center, Shop G7, Ground Floor, Kimathi Street, Nairobi, Kenya
Phone / WhatsApp: 0712 939 925 (Monday – Saturday, 8:00 AM – 7:30 PM)
Email: info@galaxybrandstore.com
If you are not happy with how we have handled your personal data, you can complain to the Office of the Data Protection Commissioner (ODPC) through its website: www.odpc.go.ke
Contact us about your data, your rights or this policy.
