Who We Are
DASHMOD LABS provides automotive infotainment firmware, prepared SD cards, in-person installation services and related support through dashmodit.com and our customer-contact and booking channels.
For privacy enquiries or requests, email dashmodlabs@gmail.com.
Information We Collect
When you browse, order, book an appointment, receive installation services or contact us, we may collect:
- Your name, email address, telephone number and billing address.
- Order details, selected delivery options, customer notes and payment references.
- M-PESA transaction information you provide or that we receive when verifying payment.
- Vehicle and head-unit details, compatibility photographs and support messages you send.
- Account information if you choose to create an account.
- Technical information such as your IP address, browser information, cookies and store-session information.
- Review information described in the Product Reviews section below.
- Appointment dates and times, booking status, vehicle make, model and year, PHEV/Hybrid status where relevant, exact head-unit model, compatibility-confirmation status, and relevant faults or modifications you disclose. We may also record installation preferences discussed with you, such as map-display preferences where applicable.
- Recipient name and telephone number, delivery address or agreed collection point, courier selection, delivery quotations and approvals, parcel references, and dispatch, delivery or collection confirmations.
- Bluetooth and Wi-Fi MAC IDs for Toyota head units, used to prepare the correct update file or SD card and provide related support.
Please do not send M-PESA PINs, passwords, identification documents or unrelated personal information. Where possible, crop unrelated people, number plates and other identifying details from compatibility photographs.
Product Reviews
When you submit a product review, we collect your name, email address, review text and any rating you provide. We also collect technical information, including your IP address and browser information, to support moderation and help prevent misuse.
Reviews are not restricted to purchases made through this website. Where WooCommerce can match a review to a qualifying website purchase, it may display a verified-owner label.
Published reviews display your reviewer name, review text, any rating and, where applicable, a verified-owner label. Your email address is not displayed as part of the public review. Please avoid including private information in your review.
Reviews are moderated before publication to check for spam, abusive or irrelevant content, and inappropriate disclosure of personal information. Genuine criticism is not, by itself, a reason to reject a review.
We use Gravatar, provided by Automattic, to display profile images alongside reviews where available. A hashed identifier derived from your email address may be sent to Gravatar to retrieve an image. Your profile image may appear publicly alongside your review. Loading an image directly from Gravatar involves a request from the visitor’s browser to that service, which can disclose technical information such as an IP address. See Automattic’s Privacy Policy for information about its processing.
How We Use Information
We use relevant information to process orders, verify product and delivery payments, check compatibility, send firmware download links, manage appointments, prepare SD cards, arrange courier delivery or collection, carry out agreed installation services and provide installation-related support.
Included installation-related support runs for 30 days after purchase for emailed downloads, 30 days from installation for in-person services including assisted SD updates, and 30 days from the date the customer receives or collects a courier-delivered prepared SD card.
We also use information to manage customer accounts, publish and moderate reviews, maintain business records, resolve disputes and protect the website against misuse.
Depending on the activity, our grounds for processing include fulfilling an order or service agreement, or taking steps you request before ordering or booking, meeting legal obligations, legitimate business interests such as security and moderation, and consent where required. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.
Creating an account and submitting a review are optional. Information needed to process an order or verify compatibility may be necessary before we can fulfil your purchase.
Payments and Delivery
M-PESA payments are verified manually. Emailed downloads require payment verification and compatibility confirmation before release. In-person services, including SD cards with installation, are payable after successful installation.
For courier orders, we use order, payment and delivery information to confirm the delivery charge and arrangements, record the separate product and delivery payments, and verify that the requirements for dispatch have been met.
For orders containing both downloads and installation, we use order and payment information to confirm the amount currently due and record payments against the relevant items.
Firmware download links are delivered manually by email using Google Drive. We use email and WhatsApp Business to communicate about orders, payments, compatibility, appointments and support.
Appointment records and related payment or service records may be maintained separately from WooCommerce orders. A calendar booking does not automatically create a WooCommerce order.
Service Providers and Information Sharing
Appointment Bookings
We use Google Calendar appointment schedules to manage installation bookings. When you book, we receive your name, email address, contact number, appointment details and the answers you provide about your vehicle, head unit and installation requirements. Google processes this information to provide the booking and calendar service.
Booking information may appear in calendar events and confirmation or cancellation emails. We use it to assess compatibility, prepare for your visit, communicate with you and manage appointments. A calendar booking does not automatically create a WooCommerce order.
Google may also process account, device, browser and usage information when you use its booking page, as explained in Google’s Privacy Policy. Please send compatibility photographs through our email or WhatsApp contact channels.
Relevant information is processed through the services and software we use to operate the business:
- Namecheap EasyWP for website hosting, caching, backups, performance monitoring and related hosting services.
- WordPress and WooCommerce software for the store, customer accounts and product reviews.
- Google Gmail, connected through FluentSMTP, for transactional emails.
- Google Drive for firmware delivery and associated file-access permissions where used.
- WhatsApp Business for customer communications.
- Safaricom M-PESA for mobile-money payments.
- Automattic’s Gravatar service for reviewer profile images.
- Google Calendar for appointment scheduling, booking-form responses, calendar events and appointment notifications.
- CHUI and other couriers selected for an order, for parcel dispatch, delivery or collection, tracking and delivery-related enquiries.
Courier deliveries
To arrange delivery, we share the information reasonably necessary with the selected courier. This may include the recipient’s name and telephone number, delivery address or collection point, parcel contents or value where needed for the shipment, and relevant order or parcel references.
We use this information to obtain delivery quotations, book the shipment, provide delivery or collection notifications and resolve delivery problems. We will identify the selected courier when confirming delivery arrangements.
Routine courier instructions do not include head-unit compatibility photographs, unrelated support conversations or customer payment-verification screenshots. We limit the information shared to what is needed for the delivery.
If you nominate another recipient, please tell them that their details will be used for these purposes and direct them to this policy.
Using software on our website does not necessarily mean its developer receives your customer information. The information processed by each service depends on its role and how we use it.
We may also disclose information where required by law or where lawfully necessary to resolve disputes or protect rights.
Google Email Connection
Our email integration connects the DASHMOD LABS mailbox to send store emails. It does not ask customers to grant access to their own Gmail accounts.
The current FluentSMTP connection requests broad Gmail permissions for the authorised business mailbox, including reading, sending and deleting mail. Its purpose in our store is to send transactional emails; the permission scope is broader than that purpose.
Email processing involves recipient addresses, message contents and delivery information, which may include order information. The website stores connection credentials and authorisation tokens needed to maintain the email connection. Website email-delivery logs and copies held in Gmail are separate records.
Cookies
The website uses cookies to support shopping-cart sessions, account login and related store functions. Blocking cookies in your browser may affect shopping or account functionality.
WooCommerce order-attribution tracking is disabled. Orders placed before it was disabled may still contain previously recorded referral information. WooCommerce’s optional usage-tracking setting is also disabled. These settings do not disable hosting logs or all third-party technical processing.
Retention and Security
We retain personal information according to its purpose, applicable legal obligations and any ongoing dispute. Different records follow different schedules. Deletion from one service does not necessarily remove copies held in other services or backups.
We review appointment records monthly and delete unnecessary active booking details and associated communications under our control within 90 days after an appointment is completed, cancelled or missed. Relevant information may be retained longer for an open support case, unresolved dispute or legal obligation. Necessary service and payment records follow the separate financial-record schedule. Calendar events and email copies are reviewed separately; deleting one does not automatically delete the other.
Delivery information forming part of necessary order, payment, refund or dispute records follows the relevant retention schedules above. We review other delivery communications and routing details monthly and delete unnecessary active copies under our control once fulfilment, support and any relevant dispute or legal requirements no longer require them. Deleting our copies does not automatically delete records held by the courier.
Customer accounts
WooCommerce is configured to delete eligible customer accounts after 24 months without a login or order. Account deletion is separate from retention of order and payment records.
Pending and failed orders
Eligible pending-payment and failed orders are scheduled for cleanup after 30 days and initially moved to Trash. This does not mean every copy is permanently erased on day 30.
Financial and other order records
We retain records required for tax and accounting purposes, including relevant order, payment and refund records, normally for five years from the end of the reporting period to which they relate. We retain relevant records longer where required by law or necessary for an unresolved dispute. We review these records annually and delete or anonymise unnecessary personal information once the applicable retention requirements and other valid purposes end. Automatic cleanup of cancelled, refunded and completed orders is not currently enabled.
Unfulfilled orders marked On hold or Processing require separate review. They are not covered by the pending-payment and failed-order cleanup settings.
Email delivery logs
FluentSMTP email-delivery logs are configured for automatic deletion after 14 days. This does not delete corresponding emails, orders, WhatsApp conversations or backups.
Installation support
We retain installation-support messages and compatibility photographs during the applicable support period: 30 days after purchase for emailed downloads, 30 days from installation for in-person services including assisted SD updates, or 30 days from receipt or collection for courier-delivered prepared SD cards. Where an associated support request remains open, relevant records are retained while it is being resolved. We delete unnecessary active copies under our control within 30 days after the applicable support period ends or the support case closes, whichever is later.
We review these records monthly. Relevant information may be retained longer where necessary for an unresolved dispute or legal obligation. Order and payment records follow the separate schedule above.
Head-Unit Data
During in-person installation, we access or process head-unit data only as necessary to perform the agreed conversion and related checks. Depending on the unit, this may include settings, paired-phone information, saved destinations and stored music. The relevant product page describes the expected effects of the conversion on existing data.
No customer-data backup service is provided. Our installation workstation does not create or retain temporary copies of customer head-unit data.
This is separate from the website backups and appointment, service, payment, compatibility-photo and support records described elsewhere in this policy.
Reviews and moderation records
We review published reviews and their associated information annually for continued relevance and necessity. We remove or anonymize information that is no longer needed for those purposes, subject to any applicable legal obligation or unresolved dispute.
Ordinary rejected or spam submissions are deleted from active systems under our control within 30 days of moderation. Necessary evidence of ongoing abuse or disputes may be retained longer and is reviewed when the matter is resolved. These are manual review procedures, not the customer-account or order-cleanup settings.
Backups
Deleted information may remain in backup copies until those backups expire or are securely deleted. EasyWP currently retains dashboard-created manual backups for up to 180 days. Namecheap separately states that its daily server-restoration backups are retained for up to 14 days.
If we restore a backup, we will reapply relevant deletions so that previously removed information is not unnecessarily returned to active use.
Security
The website uses HTTPS. No internet transmission or storage system can be guaranteed completely secure.
International Processing
Our hosting and communications providers may process information outside Kenya. International processing remains subject to applicable data-protection requirements.
Your Rights
Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion, objection to processing, restriction or portability where applicable. Where processing relies on consent, you may withdraw that consent.
Contact dashmodlabs@gmail.com. We may need to verify your identity before acting on a request. Some records may need to be retained despite a deletion request. Please contact us before sending identification documents so we can identify a proportionate verification method.
You may also raise a complaint with Kenya’s Office of the Data Protection Commissioner.
Changes to This Policy
We will update this policy when our services or data-handling practices change.