What this site collects

Who holds the information

Wamunyu Handcraft Cooperative Society Limited, P.O. Box 12-90103, Machakos, Kenya. The society is the data controller. It is registered in Kenya and subject to the Data Protection Act 2019; where a visitor is in the United Kingdom or the European Economic Area, the UK GDPR and the EU GDPR apply to what is described here.

No cookies, and no tracking

The site stores nothing on your device. There are no cookies, no local storage, no analytics, no advertising pixels and no third-party scripts of any kind. Typefaces are served from this site rather than from Google, so loading a page tells no one but us that you were here.

The map on the Visit page is the one exception, and it loads only if you press the button asking for it. Doing so contacts OpenStreetMap, which will see your IP address. If you do not press it, nothing is requested.

The enquiry form

If you send an enquiry, we keep your name, email address, country, what you asked for and any quantity or timeline you gave. We use it to reply to you and to arrange an order. In GDPR terms the basis is taking steps at your request before entering a contract.

We do not use it for marketing, we do not add you to a mailing list, and we do not share it with anyone outside the cooperative and the service providers listed below.

The staff form

Carvers and the shed manager use a separate form to file a piece. It records what the piece is, the wood, its height, the price wanted, any photographs, and the name of the carver who made it. Carver names are published beside the work, because naming the maker is the point.

Who else touches it

The site runs on Cloudflare, which hosts the pages and stores form submissions on our behalf. Cloudflare acts on our instructions as a processor and its network spans several countries, so information may be handled outside Kenya. When notification email is switched on, a mail provider will handle those messages too, and this page will name it.

How long it is kept

Enquiries are deleted automatically two years after they arrive. Records of pieces are kept while the piece is on the site and for as long as the cooperative needs them for its own accounts. Ask us and we will delete something sooner.

What you can ask for

You can ask what we hold about you, ask for it corrected, ask for it deleted, ask us to stop using it, or ask for a copy to take elsewhere. There is no charge and we will answer within one month. If you are in the UK or the EEA you can also complain to your national data protection authority; in Kenya, to the Office of the Data Protection Commissioner.

Write to the postal address above, or use the enquiry form.