Privacy & Cookie Policy

Who we are

This website is operated by Royalwoods Interiors, a bespoke interior design and fit-out studio based in Nairobi, Kenya. For the purposes of the Data Protection Act, 2019, Royalwoods Interiors is the data controller for the information described here. Our contact details are at the end of this policy.

The information we collect

Information you give us

When you complete our enquiry form, we collect your name, email address, phone number (optional), project type, budget range and the project details you write, along with any inspiration images you choose to attach. If you contact us by WhatsApp, email or phone, we receive whatever you send us, including the pre-filled booking summary if you start it from the form.

Information collected automatically

With your consent, our analytics and advertising tools collect standard technical information — such as your browser and device type, the pages you view, how you arrived, and an approximate, coarse location derived from your IP address (which Google Analytics anonymises). We also use a privacy-friendly, cookieless measurement tool that counts visits without collecting personal data or tracking you across other sites.

How we use your information

• To respond to your enquiry, prepare a quotation and plan your project.
• To communicate with you about work you have asked us to do.
• To understand how the site is used and improve it (with your consent).
• To measure and improve our advertising (with your consent).
• To keep the site secure and prevent spam and abuse.

We do not sell your personal information, and we do not use it to make decisions about you by automated means alone.

Our lawful basis

Under the Data Protection Act, 2019 we rely on: your consent (for analytics and advertising cookies, and for handling your enquiry); the steps necessary to enter into or perform a contract with you (to quote for and deliver your project); and our legitimate interests in running a secure website and improving our services, balanced against your rights.

Cookies and similar technologies

Essential storage that simply remembers your preferences is used at all times; it stays in your browser and is never sent to us. Analytics and advertising cookies load only after you accept them in the banner shown on your first visit. You can change or withdraw your choice at any time using the “Cookie preferences” link in the footer.

The essential items above (rw-theme, rw-consent) are held in your browser’s local storage. Declining, or ignoring the banner, means the analytics and advertising cookies are never set.

Who we share it with

We share personal information only with the service providers that help us run the studio and this website, and only as needed:

• Resend — delivers your enquiry to us by email.
• Google — Google Analytics and Google Ads, used only if you accept cookies.
• Meta Platforms — the Meta Pixel (used only if you accept), and WhatsApp, which carries any chat you start with us.
• Vercel — hosts this website and provides anonymous, cookieless performance analytics.
• Supabase — securely stores the website’s own content and media.

Some of these providers process data on servers outside Kenya. Where that happens, they do so under their own data-protection safeguards. We may also disclose information where the law requires it.

How long we keep it

We keep your enquiry and any related correspondence only for as long as needed to respond to you, deliver your project, and meet our business and legal record-keeping obligations — after which we delete or anonymise it. Analytics data is retained for a limited period (no more than 14 months). Cookies expire as set by each provider or when you clear them from your browser.

Your rights

Under the Data Protection Act, 2019 you have the right to:

• Be informed about how your data is used — this policy.
• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to delete your data, where the law allows.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent at any time (for cookies, via the footer “Cookie preferences” link).
• Lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these, contact us using the details below. You may also contact the Office of the Data Protection Commissioner (odpc.go.ke).

Security, children & other sites

We take reasonable technical and organisational measures to protect your information, including serving the site over HTTPS. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. This website and our services are intended for adults and are not directed at children. Links to our social channels and WhatsApp lead to services with their own privacy policies, which govern your use of them.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will revise the “last updated” date at the top of this page.

Contact us

For any question about this policy or your personal data, or to make a data-protection request, please reach Benson Omondi, Managing Director: