Your data, and what we do with it

Umbaji by KW (“Umbaji”, “we”) runs 3D printing, CNC routing, laser cutting and scanning workshops in Kenya and the United States, and sells printing machines and materials. We are responsible for the personal data described here.

Contact: [email protected], (202) 766 8412, Clarksburg, MD, 20871 USA.

Only what a job needs:

• Your email address, name and phone number, when you sign in, ask for a quote, place an order or book a consultation.
• Delivery addresses you give at checkout or save to your account.
• The 3D models and files you upload for a quote, with the settings you choose (material, quantity, size).
• Orders, payments and their status. Card and mobile money details are entered with our payment provider, not on this site; we receive the outcome and a reference, never your full card number or PIN.
• Messages you send us through the contact form, email or the quote thread.
• If you sign in with Google: your name, email address and profile picture from your Google account. We do not receive your Google password or access to anything else in your account.
• Basic technical records kept by our servers for security and to fix faults: IP address, browser type and the time of a request.

• To price your models, make your parts and deliver them (to carry out the contract with you).
• To send what you asked for: the quote, receipts, order and delivery updates, sign-in codes and booking confirmations.
• To answer your questions and resolve problems with an order.
• To keep accounts and payments secure, and to meet our tax and accounting duties.
• To send news and offers, only if you choose to receive them. Every such email has a one-click unsubscribe.

We do not sell your personal data, and we do not use your models to train anything or share them for anyone else’s use.

Uploaded models are read by our own servers to measure them and to slice them for pricing. To write the short description and printing advice shown with a quote, we send an AI service (Google’s Gemini) the measurements our software took, such as size, wall thickness and overhangs, with the file’s name, material and quantity. The model file itself is not sent.

Staff see your models only to check, price and print your job.

We use a small number of service providers, each only for its task:

• Cloudflare: delivers this website and stores product images.
• Mailgun: sends our emails.
• Paystack, Pesapal and M-Pesa: take payments, depending on where you pay.
• Google: sign-in with Google, calendar invitations for consultations, and the automatic model analysis described above.
• Our hosting provider: runs the servers that hold your account, quotes and orders.

Some of these providers process data outside the country you live in. Where they do, we rely on their contractual safeguards for international transfers.

This site does not use advertising or tracking cookies. It keeps a few items in your browser’s own storage so the site works: your sign-in, your basket, the quote you are working on, a half-filled checkout form and your sound preference. Clearing your browser’s site data removes them. Cloudflare may set a cookie to protect the site from automated abuse.

• Your account and saved addresses: until you delete the account.
• Quotes and their files: for as long as your account exists, so you can come back to them. A quote’s price holds for a limited time (shown on the quote), but the quote stays in your account.
• Orders, payments and invoices: as long as tax and accounting law requires.
• Emails and messages about an order: as long as the order record.

You can ask us for a copy of your personal data, to correct it, to delete it, or to stop using it for news and offers. People in Kenya have these rights under the Data Protection Act 2019; we give them to everyone.

To delete your account, email [email protected] from the address on the account and we will confirm once it is done. Order and payment records we must keep by law are kept, separated from your account. You can change your details and saved addresses yourself in your account.

If you are unhappy with how we handle your data, tell us first; you may also complain to your data protection authority, in Kenya the Office of the Data Protection Commissioner.

Connections to this site are encrypted. Sign-in uses emailed one-time codes or Google, so we hold no password for customer accounts. Access to customer data inside Umbaji is limited to the staff who need it for their role, and staff sign-ins are recorded.

Our services are for adults and businesses. We do not knowingly collect data from children under 18.

When this policy changes, the date at the top changes with it. A change that affects how we use data you have already given us is also sent by email.