Privacy Policy

This policy explains how OPESI MANSION LTD handles personal information when you visit our website, contact us, subscribe to launch updates, or place an order. It covers this website and its connected sales and messaging services. Separate notices or agreements may apply to a product or a service delivered for a business customer.

Who is responsible for your information

OPESI MANSION LTD is responsible for the personal information we collect for these purposes. Contact us at hello@opesimansion.com or +254701176923. Our postal address is P.O. Box 41855–80100, Mombasa, Kenya.

Information we collect

• Enquiries: your name, email address, company, optional phone number, and the message you submit. Product enquiries may also include selected items and delivery details.
• Launch updates: your email address, optional first name, signup source, and a record of your consent.
• Orders: your contact details, delivery address, items, prices, order and payment references, payment status, and records needed to handle fulfillment, refunds, disputes, and support. We record your WhatsApp confirmation preference if you choose it.
• WhatsApp: your phone number, message text, message identifiers and times, staff replies, and delivery or read status supplied by WhatsApp. Our website integration records the type of non-text messages without automatically downloading attachments.
• Website activity: technical request information such as IP address, browser information, requested pages, and error or security logs processed by our hosting and connected providers. We also use browser storage as described below.
• How you found us: when you send an enquiry or sign up for early access, we record the campaign tags in the link you followed, the website that referred you (its address without any query details), and the first page you visited. This includes visits from our own product sites, such as 90+ at 9ntyplus.com.

Provide only information needed for your enquiry or order. Do not send card details, payment PINs, passwords, or unnecessary sensitive information in a contact form or WhatsApp message. Paystack collects payment credentials through its payment interface; our website stores payment references and status rather than your full card details or mobile-money PIN.

Why we use it

We use contact information to answer enquiries, discuss requested services, process orders, arrange delivery, and provide support. We use payment and technical records to verify transactions, prevent duplicate charges and abuse, resolve disputes, and operate the website.

Our grounds for processing depend on the purpose: taking steps you request before a contract and performing that contract; meeting legal obligations such as accounting requirements; legitimate interests in operating and securing our business where your rights do not override those interests; and consent for optional launch updates and WhatsApp payment confirmations.

You can withdraw consent to optional messages by emailing us. Withdrawing consent does not affect earlier lawful processing or stop necessary order-related communications. Choosing not to provide information required for an order or enquiry may prevent us from completing that request.

Who receives your information

Our staff and service providers receive information needed for their work. The website uses Vercel for hosting, Neon for database storage, Google Workspace for email, Paystack for payment processing, and Meta/WhatsApp for WhatsApp communications. Delivery information may be shared with a delivery provider when arranging fulfillment. We may also disclose relevant records to professional advisers or authorities where necessary to meet a legal obligation or establish, exercise, or defend legal claims.

WhatsApp enquiries may be forwarded to our sales email inbox for staff handling. There is no automated WhatsApp assistant in this website integration. Payment verification uses automated checks; orders needing review are referred to staff.

These providers may process information outside Kenya. Cross-border processing is subject to applicable data protection requirements, including appropriate safeguards or another permitted basis. Contact us for information about the providers and safeguards relevant to your request. Providers may also process information under their own privacy notices when you use their services directly.

Cookies, browser storage, and tags

The website stores your theme choice, cart, and checkout recovery or receipt identifiers in your browser. These support your selected appearance and purchasing journey. Clearing site storage can remove your cart and access to locally saved order receipts; contact us if you need help recovering an order.

To record how you found us, the website keeps the campaign tags, referring website, and landing page of your visit in session storage, which your browser clears when you close the tab. It is sent to us only with an enquiry or early access request.

The website loads Google Tag Manager, which manages website tags. Requests to Google and other connected services can transmit technical information such as your IP address and browser details. Tags configured through that service may use cookies or similar technology for measurement or marketing. Payment and messaging providers may use their own cookies when you use their services.

You can manage cookies and site storage through your browser settings. Blocking them or external scripts may affect checkout or other features. This policy does not treat visiting the website as consent to optional tracking. Contact us if you want information about the tags used on the website.

Retention and security

We retain information for the purposes described here, including enquiry follow-up, order fulfillment, accounting, dispute resolution, and applicable legal obligations. The relevant period depends on the record and why it is needed. Removing browser storage or unsubscribing does not automatically delete order records, email correspondence, or information held by a provider.

Access controls, server-side credential handling, and authenticated payment and messaging integrations help protect information. No online system can guarantee absolute security. You can ask us to review continued retention or request deletion using the process below; information that must be retained for a lawful reason may be excluded.

Your rights and choices

Subject to applicable law, you can ask about the use of your information, request access or correction, object to processing, request deletion or restriction, and request portability where applicable. You can also withdraw consent where processing relies on it. We may need proportionate information to verify that a request relates to you.

Email hello@opesimansion.com with your request. See our Data Deletion instructions for removing enquiry, subscription, or WhatsApp records. You may also raise a concern with Kenya's Office of the Data Protection Commissioner.

Children and changes to this policy

The website is intended for adults making purchases or business enquiries. If you believe a child has provided personal information, contact us so we can review and address it.

We may update this policy as our services or data practices change. The date above identifies the current version. Where required, we will provide additional notice or obtain consent for a change in how information is used.