Legal

Privacy policy

How MAK Enterprises collects, uses and protects information across our website and the MAK POS mobile application.

Effective
April 25, 2026
Last updated
April 25, 2026

1. Overview

MAK Enterprises ("we", "us" or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use and protect it, and the rights you have over it. It applies to both our website and the MAK POS mobile application.

By using our services you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the website or the mobile application.

2. Who we are

MAK Enterprises is a building materials and interior finishes trading business based at Makutano Junction, Rongo Town, Migori County, Kenya. We operate this website and develop the MAK POS application for use by our staff and authorised retail partners.

For privacy-related questions, our contact details are at the bottom of this policy.

3. Scope of this policy

This policy covers two products:

  • Our website at makenterprises.co.ke — used by customers to browse our product catalog and request quotes.
  • MAK POS mobile application — a point-of-sale application installed on devices owned or operated by MAK Enterprises and its authorised retail outlets. The app is not intended for use by the general public; access requires an account issued by us.

4. Information we collect

4.1 Information you provide

When you use our services, you may provide us with:

  • Account details (MAK POS only): your name, phone number, email address, role (cashier, owner, etc.) and authentication credentials.
  • Quote and contact details (website): your name, phone number, email address and the message or product list you send us when requesting a quote or contacting us.
  • Customer details entered into MAK POS: where a staff user enters a customer's name or phone number against a sale receipt for record-keeping.

4.2 Information collected automatically

  • Device information: device model, operating system version, app version, language and unique identifiers generated by the operating system.
  • Usage and diagnostic data: actions performed in the app (such as creating a sale, opening a screen) and crash reports, used solely to keep the app working reliably.
  • Log data: IP address, request times and responses for security and audit purposes.

4.3 Information we do not collect

  • We do not collect precise GPS location.
  • We do not access your photos, contacts or messages, except where you actively select an item to upload (for example, attaching a product photo in MAK POS).
  • We do not track you across other apps or websites for advertising purposes.

5. How we use information

We use the information we collect to:

  • Operate the MAK POS application, including sign-in, recording sales, managing stock, generating receipts and producing business reports for the account owner.
  • Respond to quote requests and customer enquiries.
  • Maintain the security of accounts and detect or prevent fraud and unauthorised access.
  • Diagnose and fix bugs, monitor performance and improve the quality of our services.
  • Comply with legal and regulatory obligations.

We do not sell personal information to third parties, and we do not use it for advertising.

6. How we share information

We share personal information only in the limited circumstances described below:

  • Service providers: trusted vendors who process data on our behalf — for example, cloud hosting, authentication providers, image storage and analytics. These providers are contractually required to protect your information.
  • Legal requirements: where we are required by law, regulation, court order or government request.
  • Business transfers: in connection with a merger, acquisition or sale of business assets, in which case you will be notified of any change in ownership or use of your personal information.
  • With your consent: in any other case, only with your prior consent.

7. Data security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), token-based authentication, role-based access controls and secure cloud infrastructure.

No method of transmission over the internet or electronic storage is fully secure. While we work to protect your information, we cannot guarantee absolute security.

8. Data retention

We retain personal information only for as long as necessary to fulfil the purposes set out in this policy:

  • MAK POS account data: retained while your account is active and for a reasonable period afterwards for audit and legal purposes.
  • Sales and inventory records: retained for the period required by Kenyan tax and accounting regulations.
  • Quote and enquiry messages: retained for up to 24 months unless you ask us to delete them sooner.
  • Diagnostic logs: typically retained for 30 to 90 days.

9. Your rights

Subject to applicable law, including Kenya's Data Protection Act (2019), you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal information.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

To exercise any of these rights, contact us using the details in section 16.

10. Children's privacy

MAK POS is a workplace tool intended for staff aged 18 and above and is not directed at children. Our website is intended for a general audience but does not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Third-party services

We rely on a small number of trusted third-party services to deliver our products. Each provider has its own privacy policy, which we encourage you to review:

  • Clerk — authentication and account management for MAK POS.
  • Cloudinary — secure storage and delivery of product images.
  • MongoDB Atlas — encrypted cloud database hosting.
  • Google Play Services — required by the Android operating system to deliver, install and update the app.
  • Expo / EAS — used to build and deliver app updates.

We do not knowingly share data with advertising networks or analytics services beyond what is necessary to keep the app working.

12. Mobile app permissions

The MAK POS application may request the following device permissions. Each is requested only at the moment it is needed, and the app will continue to work (with reduced functionality) if a permission is declined.

  • Internet — required to sign in, sync data with our backend and download updates.
  • Camera — used only when you take a photo of a product or scan a barcode. Photos are uploaded to our secure image store.
  • Photos / Media — used only when you select an existing image to attach to a product.
  • Storage — used to cache product data so the app can function temporarily offline and to save receipts for sharing.
  • Notifications — used to alert staff to stock or sales events. You can disable notifications at any time from your device settings.

13. Account & data deletion

If you have a MAK POS account and would like your account and associated personal data deleted, you can request this in either of the following ways:

We will respond within 7 working days. Personal information will be deleted within 30 days, except where we are required by law (for example, Kenyan tax law) to retain certain transactional records — in which case those records will be retained only for the period required and then deleted.

14. International users

We are based in Kenya, and our services are operated from and for Kenya. If you access our services from outside Kenya, please be aware that your information may be transferred to, stored and processed in Kenya, where data protection laws may differ from those in your country.

15. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice (for example, by email or in-app notification). Continued use of our services after the changes take effect means you accept the updated policy.

16. Contact us

If you have questions, concerns or requests about this Privacy Policy or your personal information, please contact us:

Postal address
MAK Enterprises
Makutano Junction, Rongo Town
Migori County, Kenya