Your data, plainly.

Who we are

SatoMap (Sato Maps) makes framed 3D-printed route and city maps in Nairobi, Kenya. We are the data controller for the personal data described here. Contact us at prints.sato@gmail.com or on WhatsApp +254769756543.

What we collect and why

• Orders: your name, email, phone number and delivery details, plus what you ordered and the text you want on the piece (title, name, time, date). We use these to make, deliver and support your order, and to send your receipt.
• Payments: M-Pesa payments go through Safaricom and card payments through DPO. We keep the payment reference and status. We never see or store your card number.
• Maps and routes: the GPX files you upload, routes you draw and the map designs you save, so we can show previews, build your print files and print your order.
• Your account: your email address, so we can send you a sign-in code and keep your designs and plan in one place.
• Visits, only if you accept cookies: pages viewed, products viewed and checkout steps, measured with Google Analytics and the Meta pixel. This tells us what works on the site and lets us show our maps to people likely to want them on Google, Facebook and Instagram.

Cookies and your choice

The site works without marketing cookies. Google Analytics and Meta only use cookies after you press Accept on the cookie notice. If you decline, they are not used, and we don't send your activity to Meta from our server either. You can change your mind at any time: open cookie settings.

When you have accepted and place an order, we send Meta and Google a confirmation of the purchase so we can measure our ads. Your email and phone are scrambled (hashed) before they leave our server, and are never sent in readable form.

A few essential cookies always work: keeping you signed in and remembering your cookie choice.

Who we share it with

We don't sell your data. We share only what each service needs to do its job for us:

• Safaricom (M-Pesa) and DPO Pay, to take payments.
• Vercel (website hosting) and Turso (our database), where the site and its data are stored.
• Resend, to send your sign-in codes and order emails.
• Google and Meta, for analytics and advertising, only if you accept cookies.
• Couriers, with your name, phone and address, to deliver outside Nairobi.

Some of these companies store data outside Kenya. We use them because they protect it to an equivalent standard.

How long we keep it

Order and payment records are kept for as long as Kenyan tax law requires us to keep business records. Designs and uploaded GPX files are kept while your account is active so you can come back to them. Analytics data is kept by Google and Meta under their own retention settings.

Your rights

Under the Data Protection Act, 2019 you can ask us to tell you what data we hold about you, correct it, delete it, or stop using it for marketing. Email prints.sato@gmail.com from the address you used with us, and we will reply within 30 days. Where we must keep an order for tax reasons, we remove your name and contact details from it instead of deleting the record.

If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.