Privacy policy

Who is responsible

Liuba Energy is the data controller for the details on this page: we decide how they are used and we answer for them. Contact us on the shop's WhatsApp number or at a Liuba stall.

What we collect

When you order: your name, your M‑Pesa phone number, the collection office you choose, what you bought and how much you paid.

From Paystack, our payment provider: whether the payment went through, its reference and the method (M‑Pesa or card). We never see your M‑Pesa PIN or your full card number.

We do not ask for your ID number, address or email, and we don't use advertising trackers on this site.

Why we use it

To take payment, buy and test your item, send it to your collection office and tell you when and where to collect it.

To answer your questions, handle swaps, refunds and warranty claims, and to keep the sales records the law requires (including for KRA).

We send messages about your order only. We don't send adverts unless you ask us to.

Who sees it

Our own staff, only as much as their job needs.

Paystack, to process your payment, and the bus company or courier carrying your parcel (your name and phone, so you can collect).

WhatsApp (run by Meta), when we send your receipt and collection messages there: WhatsApp handles your phone number and those messages under its own privacy policy.

OpenStreetMap, only if you open the map at checkout: the map pictures load from its servers, which see your internet address but not your name or phone.

We never sell your details. We share them with authorities only when the law requires it.

Where it is kept, and for how long

Your details are stored with our hosting providers (Supabase and Vercel), on secure servers that may be outside Kenya, with protections the Data Protection Act requires.

Order and payment records are kept for 5 years because Kenyan tax law requires it. Other details are deleted when they are no longer needed.

Cookies and what is kept on your phone

The site keeps a few small things on your phone or computer, only so that it works: your cart, the language you chose and, for staff, their sign-in. Checkout also remembers the order it has started, so a lost connection doesn't make a second one.

We don't use cookies for advertising or to follow you around the internet, so there is nothing to accept or refuse. We count visits to our pages with Vercel Web Analytics, which uses no cookies and doesn't tell us who you are.

Your rights

You can ask to see the details we hold about you, to correct them, or to delete them (except records we must keep by law). You can also object to how we use them.

Ask us on our WhatsApp number or at a Liuba stall. We reply within 7 days.

If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Keeping it safe

Only signed-in staff can see orders, every staff action is recorded, and payment confirmations come straight from Paystack. If a data breach ever affects you, we will tell you and the Data Protection Commissioner as the law requires.