1. Overview
MAK Hardware ("we", "us" or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use and protect it, and the rights you have over it. It applies to both our website and the MAK POS mobile application.
By using our services you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the website, our WhatsApp line or the mobile application.
2. Who we are
MAK Hardware is a building materials and interior finishes trading business based at Makutano Junction, Rongo Town, Migori County, Kenya. We operate this website and develop the MAK POS application for use by our staff and authorised retail partners.
For privacy-related questions, our contact details are at the bottom of this policy.
3. Scope of this policy
This policy covers three services:
- Our website at makis.co.ke — used by customers to browse our product catalog and request quotes.
- MAK POS mobile application — a point-of-sale application installed on devices owned or operated by MAK Hardware and its authorised retail outlets. The app is not intended for use by the general public; access requires an account issued by us.
- Our WhatsApp line — the WhatsApp Business number customers message to ask about products, prices and orders, including after tapping one of our Facebook or Instagram adverts.
4. Information we collect
4.1 Information you provide
When you use our services, you may provide us with:
- Account details (MAK POS only): your name, phone number, email address, role (cashier, owner, etc.) and authentication credentials.
- Quote and contact details (website): your name, phone number, email address and the message or product list you send us when requesting a quote or contacting us.
- Customer details entered into MAK POS: where a staff user enters a customer's name or phone number against a sale receipt for record-keeping.
- WhatsApp conversations: when you message us on WhatsApp, we receive your WhatsApp profile name and phone number, the messages, photos and locations you send us, and details you share such as your name, where you are building and what you need. If you reached us by tapping one of our adverts, we also receive which advert you tapped.
4.2 Information collected automatically
- Device information: device model, operating system version, app version, language and unique identifiers generated by the operating system.
- Usage and diagnostic data: actions performed in the app (such as creating a sale, opening a screen) and crash reports, used solely to keep the app working reliably.
- Log data: IP address, request times and responses for security and audit purposes.
4.3 Information we do not collect
- We do not collect precise GPS location.
- We do not access the photos, contacts or messages on your device. We only receive what you choose to send us — for example, a message or photo you send to our WhatsApp line, or a product photo you attach in MAK POS.
- We do not track you across other apps or websites for advertising purposes.
5. How we use information
We use the information we collect to:
- Operate the MAK POS application, including sign-in, recording sales, managing stock, generating receipts and producing business reports for the account owner.
- Respond to quote requests and customer enquiries, including messages to our WhatsApp line, and follow up on orders.
- Understand which of our adverts bring enquiries, so we can improve our advertising.
- Maintain the security of accounts and detect or prevent fraud and unauthorised access.
- Diagnose and fix bugs, monitor performance and improve the quality of our services.
- Comply with legal and regulatory obligations.
We do not sell personal information to third parties, and we do not use your messages to target advertising at you.
5.1 Automated replies on WhatsApp
Messages to our WhatsApp line are answered by an automated assistant that uses artificial intelligence and our live product catalogue to answer questions, recommend products, calculate quantities and prepare order requests. It does not make decisions that have legal or similarly significant effects on you — prices, orders and payments are always confirmed by our staff.
You can ask to speak to a person at any time and a member of our team will take over the conversation. Our staff can read the conversation history so they can help you.
7. Data security
We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), token-based authentication, role-based access controls and secure cloud infrastructure.
No method of transmission over the internet or electronic storage is fully secure. While we work to protect your information, we cannot guarantee absolute security.
8. Data retention
We retain personal information only for as long as necessary to fulfil the purposes set out in this policy:
- MAK POS account data: retained while your account is active and for a reasonable period afterwards for audit and legal purposes.
- Sales and inventory records: retained for the period required by Kenyan tax and accounting regulations.
- Quote and enquiry messages: retained for up to 24 months unless you ask us to delete them sooner.
- WhatsApp conversations: retained for up to 24 months after your last message, unless you ask us to delete them sooner or they form part of a sales record we must keep.
- Diagnostic logs: typically retained for 30 to 90 days.
9. Your rights
Subject to applicable law, including Kenya's Data Protection Act (2019), you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.
To exercise any of these rights, contact us using the details in section 16.
10. Children's privacy
MAK POS is a workplace tool intended for staff aged 18 and above and is not directed at children. Our website is intended for a general audience but does not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Third-party services
We rely on a small number of trusted third-party services to deliver our products. Each provider processes data only to provide its service to us and is required to keep it secure:
- Authentication provider — secure sign-in and account management for MAK POS.
- Image hosting provider — secure storage and delivery of product images.
- Cloud database provider — encrypted hosting of our business records.
- Google Play Services — required by the Android operating system to deliver, install and update the app.
- Expo / EAS — used to build and deliver app updates and to send notifications to staff devices.
- Meta Platforms (WhatsApp Business Platform) — delivers messages between you and our WhatsApp line.
- AI service provider — processes WhatsApp messages on our behalf to generate the automated replies. It processes this data only to provide the service to us and does not use it to train its models.
- Email delivery provider — delivers email notifications, such as quote requests sent to our team.
We do not knowingly share data with advertising networks or analytics services beyond what is necessary to keep the app working.
12. Mobile app permissions
The MAK POS application may request the following device permissions. Each is requested only at the moment it is needed, and the app will continue to work (with reduced functionality) if a permission is declined.
- Internet — required to sign in, sync data with our backend and download updates.
- Camera — used only when you take a photo of a product or scan a barcode. Photos are uploaded to our secure image store.
- Photos / Media — used only when you select an existing image to attach to a product.
- Storage — used to cache product data so the app can function temporarily offline and to save receipts for sharing.
- Notifications — used to alert staff to stock or sales events. You can disable notifications at any time from your device settings.
13. Account & data deletion
You can ask us to delete your personal data at any time.
If you have chatted with us on WhatsApp, send the message "Delete my data" to the same MAK Hardware WhatsApp number, or call us on the number below.
If you have a MAK POS account, request deletion of your account and associated personal data in either of the following ways:
- Email info@makis.co.ke from the email address on your account, with the subject "Account deletion request".
- Call us on +254 711 428 031 during business hours.
We will respond within 7 working days. Personal information will be deleted within 30 days, except where we are required by law (for example, Kenyan tax law) to retain certain transactional records — in which case those records will be retained only for the period required and then deleted.
14. International users
We are based in Kenya, and our services are operated from and for Kenya. If you access our services from outside Kenya, please be aware that your information may be transferred to, stored and processed in Kenya, where data protection laws may differ from those in your country.
15. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice (for example, by email or in-app notification). Continued use of our services after the changes take effect means you accept the updated policy.
16. Contact us
If you have questions, concerns or requests about this Privacy Policy or your personal information, please contact us:
Makutano Junction, Rongo Town
Migori County, Kenya