Privacy Policy

Last updated: 29 September 2026

This policy explains how Kryptonite International Limited, trading as Vision Plus (“we”, “us”), collects and uses personal data when you use visionplus.co.ke, buy from us, register a warranty, or contact us, including on Facebook, Instagram and WhatsApp. We process personal data in line with Kenya’s Data Protection Act, 2019.

Who we are

Kryptonite International Limited, 1st Floor, Gallant Mall, Parklands Road, Parklands, Nairobi, Kenya.
Email: [email protected] · Phone: 0111 052 700
For privacy questions and requests, email [email protected] with the subject “Privacy”.

What we collect

Orders and delivery: your name, phone number, email address, delivery address and what you bought.
Payments: M-Pesa and card payments are processed by our payment providers (Safaricom M-Pesa and iPay). We receive a payment confirmation. We do not store your M-Pesa PIN or card number.
Warranty registration: your name, contact details, product serial number, purchase date, place of purchase, invoice or order number, and a photo of your receipt.
Messages to us: what you send us by phone, email, WhatsApp, or comments and direct messages on our Facebook and Instagram pages, together with your public profile name.
Catalogue and marketing sign-ups: your name, WhatsApp number and email, if you ask us to send you our catalogue or offers.
Website chat: what you type into the chat window on our website, along with details you give us such as your name, email or phone number.
Website use: information about how you use our website, such as the pages you view, the device and browser you use, and your approximate location. It is collected through cookies and similar technologies, subject to the choices you make in our cookie banner.

How we use it

To process, deliver and support your orders, and to handle returns and warranty claims.
To answer your questions and messages.
To send you our catalogue, offers or updates, only if you have agreed. You can opt out at any time.
To prevent fraud, and to keep our website and payments secure.
To meet our legal, tax and accounting obligations.

How we answer social media messages

When you comment on our Facebook or Instagram posts or send us a direct message, the message, your public profile name and the post you commented on are processed by an AI assistant that helps our team reply. The assistant uses Anthropic’s Claude service, and it looks up product prices and stock on our website to answer you. The assistant hands questions about orders, payments, refunds, repairs and complaints to a member of our team. Its answers are limited to information we publish, and we monitor its replies. We keep these conversations for up to 12 months so our team can follow up and so we can improve our service.

Cookies, analytics and advertising

Our website uses cookies and similar technologies. Our cookie banner lets you accept or refuse the ones that aren’t strictly necessary, and you can change your choice at any time. With your consent, we use:

Google Analytics and Google Tag Manager, to understand how visitors use our site.
The Meta Pixel and Meta Conversions API, to measure our Facebook and Instagram ads and show you relevant ones.
The TikTok Pixel, to measure our TikTok ads.
Zoho SalesIQ, PageSense, Marketing Automation and CRM, for website chat, understanding how visitors use our pages, and managing our customer contacts and marketing.

Who we share it with

We share personal data only as needed to serve you:

delivery and courier partners;
payment providers;
our service and repair centre;
technology providers that host and run our website and messaging tools, including Meta Platforms (Facebook, Instagram, WhatsApp), Anthropic (AI assistant), Google (analytics), TikTok (ad measurement), Zoho (chat, CRM and marketing), Cloudflare (website security and delivery), and our hosting and email providers;
authorities, where the law requires it.

We do not sell your personal data.

Transfers outside Kenya

Some of these providers process data outside Kenya, for example in the United States or the European Union. Where this happens, we rely on the safeguards the Data Protection Act allows, such as contractual protections.

How long we keep it

We keep order, payment and warranty records for as long as the law requires, generally 7 years for tax and accounting records, and for as long as your warranty runs. We keep messages as described above, and marketing preferences until you opt out.

Your rights

You have the right to:

be told how your data is used;
access your data;
correct your data;
have your data deleted;
object to or restrict processing, including direct marketing.

To use any of these rights, contact us using the details above. You can also complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Deleting your data (including Facebook and Instagram messages)

To ask us to delete your personal data, including your conversations with us on Facebook or Instagram:

Email [email protected] with the subject “Delete my data”, or send “Delete my data” as a direct message to our Facebook or Instagram page.
Tell us your name and the phone number, email, or Facebook or Instagram username you used with us.
We will confirm and complete the deletion within 30 days. The only exception is records we must keep by law, such as tax invoices, which we will tell you about.

Changes

We may update this policy. We will post the new version on this page with a new “Last updated” date.