Privacy Policy — Daichi Corporate Gifts

Daichi Corporate Gifts is operated by Daichi Procurement Solutions (“Daichi”, “we”, “us”, “our”). We are committed to protecting the privacy of every visitor, client and corporate account holder. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Kenya Data Protection Act, 2019.

1. Who we are (Data Controller)

Daichi Procurement Solutions is the data controller for personal data collected through this website and our gifting services. You can reach our team at the contact details at the end of this policy.

2. Data we collect

Quote & order data: company name, contact name, email, WhatsApp number, product description, quantities, branding requirements, delivery dates, budget and occasion.
Corporate account data: company details, estimated monthly spend, preferred payment method and referral source.
Order-tracking data: order references you enter to look up status.
Communication data: messages you send via email, WhatsApp or web forms.
Technical data: IP address, browser type, device information and pages visited, collected through standard server logs and analytics.

3. How we use your data (purposes & legal bases)

To respond to quote requests and fulfil orders — performance of a contract.
To open and manage corporate accounts — performance of a contract and our legitimate interest in managing client relationships.
To send service updates (e.g. order status by email and WhatsApp) — performance of a contract.
To improve our service and website — our legitimate interest in operating a reliable business.
To comply with legal obligations — including tax, accounting and anti-fraud requirements.
For marketing communications — only with your consent, which you can withdraw at any time.

4. Sharing your data

We share personal data only with parties that help us deliver our service:

Production partners, branding workshops and couriers who fulfil your order.
Cloud and software providers that host our website and database (including Supabase and our hosting provider).
Payment, accounting and tax advisors where required.
Regulators, law enforcement or courts where we are legally obliged.

We never sell your personal data.

5. International transfers

Some of our service providers process data outside Kenya, including within the European Union and the United States. Where we transfer personal data internationally, we rely on adequacy decisions, Standard Contractual Clauses or equivalent safeguards consistent with GDPR and the Kenya Data Protection Act.

6. Data retention

We retain personal data only for as long as necessary for the purposes set out above, including legal, accounting and reporting requirements. Quote requests and order records are typically retained for up to seven (7) years to meet Kenyan tax and audit obligations.

7. Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your data (“right to be forgotten”).
Restrict or object to certain processing.
Request portability of data you provided to us.
Withdraw consent at any time, where consent is the legal basis.
Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local EU supervisory authority.

To exercise any of these rights, please contact us using the details below. We will respond within the timeframes required by law.

8. Security

We use industry-standard technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls and Row-Level Security on our database. No system is 100% secure, and we encourage you to use strong passwords and protect your own devices.

9. Cookies & analytics

We use a minimal set of cookies and analytics tools to keep the website functioning and to understand how visitors interact with it. Where required by law, we will request your consent before placing non-essential cookies.

10. Children

Our services are intended for businesses and adult professionals. We do not knowingly collect personal data from children under 18.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted on the website.

12. Contact us

Questions, requests or complaints about your personal data? Reach our team: