Privacy Policy

1. Introduction

My Celebration Books ("we", "us", or "our") operates the website https://www.mycelebrationbooks.com (the "Site") and the My Celebration Books service. We are committed to protecting your privacy and processing your personal data in accordance with the Kenya Data Protection Act, 2019 (DPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Data Controller Information

For the purposes of the DPA, My Celebration Books is the Data Controller. This means we determine the purposes and means of processing your personal data. If you have any questions about this policy or our data practices, please contact us at: support@mycelebrationbooks.com or at our physical address in Kenya.

3. Personal Data We Collect

We may collect the following categories of personal data:

• Account Information: Full name, email address, and password.
• Profile Information: Profile picture, display name, or biographical information (optional).
• Content You Create: Narratives, comments, messages within celebration books.
• Media: Photos, images, audio, or video files you upload.
• Invitation Data: Names and email addresses of people you invite.
• Billing Information: Payment details (processed by secure third party; we do not store full card numbers).
• Technical Data: IP address, browser type, operating system, referring URLs, usage data.
• Communication Data: Records of correspondence with our support team.

4. How We Collect Your Personal Data

• Directly from you: When you register, create a book, upload content, invite contributors, or contact us.
• Automatically: Through cookies and tracking technologies.
• From third parties: If you log in via social media (if enabled).

5. Legal Basis for Processing

We rely on: Consent (you can withdraw anytime), Contractual Necessity (to provide our service), Legal Obligation (tax/record keeping), and Legitimate Interests (improvement, security, fraud prevention).

6. How We Use Your Personal Data

• Create, manage, and maintain your account and celebration books.
• Process subscription payments.
• Send invitations to contributors.
• Respond to inquiries and provide customer support.
• Improve and optimize the Site and user experience.
• Detect, prevent, and address technical or security issues.
• Send service-related announcements.
• Send marketing communications (only with your consent; opt out anytime).

7. Data Sharing and Disclosure

We do not sell your personal data. We may share it with:

• Your Invitees: Your name and book details.
• Service Providers: Cloud hosting, payment processing, email delivery, analytics (contractually obligated to protect your data).
• Legal Reasons: If required by law or to protect rights/safety.
• Business Transfers: Merger, acquisition, or asset sale (you will be notified).

8. International Data Transfers

Your data may be transferred outside Kenya. We ensure appropriate safeguards (e.g., adequacy decisions by Kenyan Data Commissioner or ODPC-approved contractual clauses).

9. Data Retention

We retain your data as long as your account is active. Upon closure, we delete personal data within 30 days, unless required for legal compliance. Residual copies may remain in backups for a limited period.

10. Data Security

We use TLS encryption, access controls, and regular monitoring. However, no method is 100% secure.

11. Data Breach Notification

If a breach risks your rights, we will notify you and the ODPC within 72 hours, as required by the DPA.

12. Your Data Protection Rights

Under the Kenya Data Protection Act, you have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent. To exercise these rights, contact support@mycelebrationbooks.com. We will respond within 30 days.

If unsatisfied, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC):

• Website: www.odpc.go.ke
• Email: info@odpc.go.ke
• Phone: 020 780 1800

13. Cookies and Tracking Technologies

We use essential, functional, and analytics cookies. You can control cookies via browser settings. See our separate Cookie Policy for details.

14. Children's Privacy

Our service is not directed to children under 18. We do not knowingly collect data from children under 18. If you believe we have, please contact us.

15. Changes to This Privacy Policy

We may update this policy. Material changes will be notified via email or site notice. The "Last Updated" date will be revised accordingly.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: support@mycelebrationbooks.com
• Address: [Office Address, Kenya]