Privacy Policy

1. Who we are

Solforbs Store (store.solforbs.com) is the data controller for the personal data described here. You can reach us through our contact page or at store@solforbs.com.

2. What we collect

Order details: your name, email address, phone number, delivery address, town and delivery area, and the items you buy.
Account details: if you register, your name, email address and password (stored only in encrypted, hashed form), and your order history.
Payment details: payments are handled by Paystack. We receive the payment reference, amount and status. We never see or store your M-Pesa PIN or card numbers.
Messages: what you send us through the contact form or customer care.
Shopping assistant: questions you type into the assistant, so it can suggest products.
Technical data: your IP address, browser and device type, pages visited and essential cookies. With your consent, analytics data as explained in our Cookie Policy.

3. How we use it, and why

To process and deliver your orders, take payment, send order confirmations and updates, and handle returns and refunds. We need this to carry out our contract with you.
To provide customer care and answer your messages.
To keep records for accounting, tax and other legal obligations.
To keep the store safe, prevent fraud and misuse, and fix problems. This is in our legitimate interests.
To understand how the store is used and improve it, through analytics cookies, only if you consent.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

We share only what each party needs to do its job:

Paystack, to process your payment.
Delivery riders and courier partners, who receive your name, phone number and address to deliver your order.
Google, which powers our shopping assistant (Gemini) and, if you consent, our analytics (Google Analytics). Please do not type personal or sensitive information into the assistant.
Hosting and email providers that run the website and send our emails.
Authorities, when the law requires it, or to protect our rights, customers or the public.

Some of these providers may process data outside Kenya. When that happens, we rely on providers that offer appropriate safeguards for your data, as the Data Protection Act requires.

5. How long we keep it

We keep order and payment records for as long as needed for accounting and tax purposes under Kenyan law. Account details are kept while your account is open. Messages are kept as long as needed to deal with your request. Other data is deleted or anonymised when we no longer need it.

6. How we protect it

The website uses encrypted HTTPS connections, passwords are hashed, and access to customer data is limited to staff who need it. No system is perfectly secure, but we work to protect your data and will notify you and the Data Commissioner of a breach where the law requires.

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

be told how your personal data is used, and access a copy of it;
ask us to correct data that is wrong or incomplete;
ask us to delete data we no longer have a reason to keep;
object to or restrict how we use your data;
receive your data in a portable format; and
withdraw your consent at any time, for example for analytics cookies through .

To use any of these rights, contact us. We may ask you to confirm your identity first. If you are not happy with how we handle your data, you can complain to the Office of the Data Protection Commissioner.

8. Children

Our store is not aimed at children under 18, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.