Spindrop is committed to handling the personal information of our subscribers, visitors, and business contacts with transparency, integrity, and care. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and what rights you have in relation to that data. Our service is delivered primarily to tradespeople and businesses across Kenya, and this policy reflects our obligations under Kenyan data protection law. By using our website or subscribing to our monthly drill bit delivery service, you acknowledge that you have read and understood this policy.
When you sign up for a Spindrop subscription, we collect the personal information necessary to fulfil and manage your account. This includes your full name, delivery address, county of operation, phone number, and payment details. We also collect the trade profile information you supply during onboarding — the materials you work with, your typical project types, and your tool preferences — because this data drives the curation of your monthly box. When you visit our website, we automatically collect certain technical data, including your IP address, browser type, device type, pages visited, and time spent on each page. This is collected through standard web analytics tools and helps us maintain and improve our service.
Your personal data is used first and foremost to provide the subscription service you have signed up for. This means processing your payment, building your customised monthly kit, organising dispatch, and keeping you informed about your shipment status. We also use your contact details to send service-related communications such as billing notifications, delivery updates, and subscription renewal reminders. Your trade profile is used internally by our curation team and is never used for purposes unrelated to your subscription. Where you have opted in, we may use your contact information to send you information about new product ranges, webinar events, or updates to our subscription tiers.
Spindrop does not sell, rent, or trade your personal information to any third party. We do share limited data with service providers who assist in delivering the subscription, specifically our courier and last-mile delivery partners who require your name and delivery address to complete shipments. These partners are bound by confidentiality obligations and are prohibited from using your data for any purpose other than the delivery of your box. We may also share data with payment processing providers for the purpose of completing billing transactions. If required by Kenyan law or a valid court order, we may disclose personal information to the relevant authorities.
We retain your personal data for as long as your subscription remains active and for a period of three years following cancellation, in line with our financial record-keeping obligations. Trade profile data may be retained in anonymised and aggregated form beyond this period to inform product sourcing decisions, but in such cases it cannot be linked back to you as an individual. Payment card details are not stored directly by Spindrop; they are handled by our payment processor and governed by that provider's own data retention and security standards. You may request deletion of your data at any time subject to the limitations described in Section 7 of this policy.
Spindrop takes reasonable and proportionate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our subscriber database is hosted on secured infrastructure with restricted access controls, and all data transmitted between your browser and our website is encrypted using industry-standard TLS protocols. Internally, access to subscriber personal data is limited to staff members whose roles require it for service delivery purposes. While we strive to maintain robust security practices, no digital system is entirely immune from risk, and we cannot guarantee absolute security of data transmitted over the internet.
You have the right to request access to the personal data Spindrop holds about you, and to receive a copy of that data in a readable format. You may request correction of any inaccurate data we hold. You have the right to request deletion of your data, subject to any legal obligations that require us to retain it. You may withdraw consent for marketing communications at any time by contacting our support team by phone. You also have the right to lodge a complaint with the relevant data protection authority in Kenya if you believe your data has been handled improperly. We aim to respond to all data requests within 14 working days of receipt.
Spindrop's subscription service is intended exclusively for adults operating in a professional or trade capacity. We do not knowingly collect personal information from individuals under the age of 18. If you believe that a minor has submitted personal data to us without appropriate parental or guardian consent, please contact our support team by phone so we can investigate and remove the data promptly. Our website content and marketing materials are directed at working tradespeople and business owners, and we take no deliberate steps to engage with or collect data from minors.
Spindrop may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service offerings. Any material changes will be communicated to active subscribers via the phone number held on their account, and the updated policy will be published on this page with a revised effective date. We encourage you to review this page periodically. Your continued use of the Spindrop service following any update constitutes your acknowledgement of the revised policy. If you have questions about how we handle your data, our support team is reachable by phone during business hours, Monday to Friday.