Privacy Policy

Last Updated: 19 December 2025

At NILUBUY, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal information when you use our website and services.

1. Data Controller

Company: NILUBUY

Address: Uganda Road 66, Eldoret, Kenya

Email: contact (at) nilubuy.shop

Phone: +254 53 778 3322

2. Information We Collect

Direct Personal Information

Full name
Email address
Phone number
Postal address
Payment details (processed by secure third parties)
Communication preferences

Automatic Information

IP address
Browser type and version
Operating system
Pages visited and time spent
Referral source
Geo-location data (approximate)

Information from Third Parties

Data from social media (Facebook, Instagram, Twitter)
Google Analytics information
Data from advertising platforms
Information from business partners

Communication Information

Messages sent through forms
Contact emails
Phone calls (with your permission)
Online conversations

3. Legal Basis for Processing

Purpose	Legal Basis	Data Used
Service delivery	Contract execution	Contact data, payment details
Direct marketing	Express consent	Email, preferences, interaction history
Website analytics	Legitimate interest	Navigation data, analytics cookies
Legal compliance	Legal obligation	All data as required

4. How We Use Your Information

Main uses:

Basic services:

Provide our products and services
Process payments and transactions
Manage your user account
Provide customer support

Communication:

Respond to questions and requests
Send order confirmations
Important service notifications
Newsletter (with consent)

Improvement and personalization:

Improve our products and services
Personalize your experience
Usage and trend analysis
Market research

Marketing (with consent):

Send offers and advertisements
Targeted advertising
Retargeting on other platforms
Advertising effectiveness analysis

5. Sharing Information with Third Parties

We do not sell your personal data. We share information only in the following circumstances:

Service providers: For payment processing, website analytics, email marketing, hosting
Legal compliance: When required by law or relevant authorities
Merger or acquisition: In case of sale, merger, or business transfer
Rights protection: To protect our legal rights or the safety of others
With your consent: For other purposes with your express permission

6. International Transfers

Important information about data transfers:

Some of our service providers may be located outside Kenya. When we transfer data to countries without an adequate level of protection, we use appropriate safeguards such as:

Standard contractual clauses
Recognized privacy certifications
Additional technical and procedural measures

7. Data Security

Technical measures:

SSL/TLS encryption for data transmission
Encryption of data at rest
Firewalls and intrusion detection systems
Regular security updates
Multi-factor authentication

Procedural measures:

Limited access to personal data
Regular employee training
Written security policies
Regular security audits
Incident response plan

Important: Although we implement robust security measures, no system is 100% secure. We recommend keeping your login credentials secure.

8. Your Privacy Rights

Access

Right to get confirmation if we are processing your data and access to that data.

Correction

Right to request correction of inaccurate or incomplete data.

Deletion

Right to request deletion of your personal data in certain circumstances.

Objection

Right to object to processing based on legitimate interest or for direct marketing.

Portability

Right to receive your data in a structured and machine-readable format.

Withdraw Consent

Right to withdraw consent given for processing your data.

To exercise these rights:

Send an email to: contact (at) nilubuy.shop
Include valid identification
Explain your request clearly
We will respond within 30 days

9. Data Retention

Data Type	Retention Period	Criteria
Active customer data	Duration of business relationship + 5 years	Tax obligations and contract
Marketing data	Until consent withdrawal	User consent
Website navigation data	2 years	Analysis and service improvement
Technical support data	3 years	Problem solving and improvements

10. Minors

Protection of minors:

Our services are intended for people aged 18 and over. We do not knowingly collect personal information from children under 18 without verified parental or guardian consent.

If we discover that we have collected information from a minor without appropriate consent, we will take immediate steps to delete that information from our systems.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our information practices or applicable laws.

Notification of changes:

Minor changes: Will be published on this page
Major changes: We will notify you by email
Changes requiring new consent: We will request your express permission

12. Contact and Supervisory Authority

Email: contact (at) nilubuy.shop
Phone: +254 53 778 3322
Address: Uganda Road 66, Eldoret, Kenya
Service hours: Monday - Friday, 09:00 - 18:00

Data protection authority:

If you are not satisfied with our response, you can file a complaint with:

Office of the Data Protection Commissioner (ODPC)

Website: www.odpc.go.ke

Legal Notice:

This policy has been prepared in accordance with the Kenya Data Protection Act, 2019 and international privacy best practices.