SECTION 1 – WHAT IS ENDA?
Enda is a Swahili word that means "Go!". Enda Athletic, Inc. is a Benefit Corporation founded in 201 and is an athletic footwear and apparel brand and production company that is building on and contributing to Kenya’s reputation as the world champion of distance running. We are bringing together world-class shoe designers, developers, and Kenyan athletes to create performance running shoes that capture the skills and experience of Kenyan athletes. We are making our products in Kenya and selling them to the world.
Through Kenyan production, global sales, and persistent storytelling, Enda Athletic provides a means through which runners globally can connect with Kenya’s running greatness. We are also greatly increasing the amount Kenya benefits from its running reputation as we create jobs, contribute to communities, and build the reputation of Kenya as a place that develops quality products.
SECTION 2 – HOW DO WE COLLECT INFORMATION FROM YOU?
We collect browsing information on your IP address, what pages are accessed and when. This is done via cookies. For more details on cookies see below.
We also collect personal information such as your name, email address, postal address and phone number when you subscribe to our mailing list or take out a subscription.
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you purchase a subscription using Direct Debit, financial information will be added to our customer relationship management software. This is to enable us to process future Direct Debit payments.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
SECTION 3 - WHAT DO WE DO WITH YOUR INFORMATION?
We use your information to:
- Process a subscription or an order that you have made;
- Carry out our obligations arising from any contracts entered into by you and us;
- Notify you of changes to our services;
- Send you, with your permission, email marketing content which includes information about content on our website, updates on campaigns and information about events we are hosting;
- Monitor how you use the website, and how you got to the website;
- Seek your views or comments on the products and services we provide;
- Deal with entries into any competitions we run.
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.
SECTION 4 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us on email at firstname.lastname@example.org or writing to us at: Enda Athletic, Inc., 8 The Green STE B, Dover, Kent County, Delaware US 19901.
You can also opt out of receiving email marketing at any time using the ‘unsubscribe’ button at the bottom of any such email.
SECTION 5 – WHO HAS ACCESS TO YOUR INFORMATION?
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes. We may occasionally share anonymised score customisation data with academic institutions for research purposes.
SECTION 6 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 7 - THIRD-PARTY SERVICES
In general, the third-party service providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.
Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Enda uses the following Third-Party Service Providers:
Our store is hosted on Shopify Inc. For detailed information on how we use Shopify, refer to “SECTION 2 – HOW DO WE COLLECT INFORMATION FROM YOU?”
The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity to be looked at by Enda, and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
We use the “visitor action pixels” from Facebook Inc (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) on our website.
This allows user behavior to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.
You can opt-out to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: https://www.facebook.com/settings?tab=ads.
In Kenya only, we use Sendy as a delivery service. When you place an order on our site, your order and address are given to Sendy to deliver your order. You can read more about their terms of service here: https://sendy.co.ke/terms.
SECTION 8 – HOW CAN YOU ACCESS AND UPDATE YOUR INFORMATION?
The accuracy of your information is important to us. If you wish to update your email address please follow the link at the bottom of every email from us.
Alternatively, if you change email address, or any of the other information we hold is inaccurate or out of date, please contact us on email at email@example.com or writing to us at: Enda Athletic, Inc., 8 The Green STE B, Dover, Kent County, Delaware US 19901.
SECTION 9 - SECURITY
When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information (such as credit or debit card details) is encrypted. When you are on a secure page, a lock icon will appear on the bottom of web browsers such as Microsoft Internet Explorer.
Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.
Once we receive your information, we make our best effort to ensure its security on our systems. To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 10 – COOKIES AND WHY WE USE THEM
Our cookies help us:
- Make our website work as you'd expect;
- Remember your settings during and between visits;
- Improve the speed/security of the site;
- Allow you to share pages with social networks like Facebook;
- Continuously improve our website;
- Remember if you have accepted our terms and conditions;
- Make our subscription and registration pages work; and
- Make our marketing more efficient (ultimately helping us to offer the products and services we do at the price we do)
- Collect any personally identifiable information (without your express permission);
- Collect any sensitive information (without your express permission);
- Pass personally identifiable data to third parties;
- Pay sales commissions
If the settings on your software that you are using to view this website (your browser) are adjusted to accept cookies we take this, and your continued use of our website, to mean that you are fine with this.
Our own cookies
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not:
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
PREF, persistent for a very short period, Set by Google and tracks who visits the store and from where
There is no way to prevent these cookies being set other than to not use our site.
Third party functions
Our site, like most websites, includes functionality provided by third parties. A common example is an embedded YouTube video. Disabling these cookies will likely break the functions offered by these third parties.
To ensure that you can easily 'Like' or share our content on the likes of Facebook, Instagram and Twitter we have included sharing buttons on our site. The privacy implications on this will vary from social network to social network and will be dependent on the privacy settings you have chosen on these networks.
We use Google Analytics to compile visitor statistics such as how many people have visited our website, what type of technology they are using (e.g. Mac or Windows which helps to identify when our site isn't working as it should for particular technologies), how long they spend on the site, what page they look at etc.
This helps us to continuously improve our website. These so called 'analytics' programs also tell us, on an anonymous basis, how people reached this site (e.g. from a search engine) and whether they have been here before helping us to put more money into developing our services for you instead of marketing spend.
Turning Cookies Off
You can usually switch cookies off by adjusting your browser settings to stop it from accepting cookies. Doing so however will likely limit the functionality of our website and a large proportion of the world's websites as cookies are a standard part of most modern websites
It may be that you concerns around cookies relate to so called "spyware". Rather than switching off cookies in your browser you may find that anti-spyware software achieves the same objective by automatically deleting cookies considered to be invasive. Learn more about managing cookies with antispyware software.
SECTION 11 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian's permission beforehand whenever you provide us with personal information.
SECTION 12 – YOUR RIGHTS
Under the General Data Protection Regulation (GDPR) you have a number of rights with regard to your personal data. You have the right to:
- Be informed about the collection and use of your personal data
- Access to your personal data
- Rectification of your personal data
- Have the personal data we hold on you erased
- Restrict the processing of your personal data
- Object to the processing of your personal data
- Have your personal data transferred to another controller/processor
SECTION 13 – IDENTITY AND CONTACT DETAILS OF CONTROLLER
Enda Athletic, Inc., whose address is 8 The Green STE B, Dover, Kent County, Delaware US 19901, is the controller and processor of your information in this policy. Irrespective of which country you live in, you authorize us to transfer, store, and use your information in the United States, Kenya, Australia, and any other country where we operate, including through our offices, partners, and service providers. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
We keep this Policy under regular review. This Policy was last updated 25 May 2018.
SECTION 15 - QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact Navalayo Osembo by email at firstname.lastname@example.org or by writing to Enda Athletic, Inc., 8 The Green STE B, Dover, Kent County, Delaware US 19901.