Privacy Policy
Last updated: 1 August 2026
Nuru Electronics Ltd ("NURU", "we", "us"), registered at 147, Nairobi, Kenya, is the data controller for the personal data described in this policy. This policy explains what we collect, why, who we share it with, and how you can exercise your rights under the Kenya Data Protection Act, 2019.
1. What we collect
Depending on how you interact with the site, we collect:
- Order and account data: name, email, phone number, and, for delivery, recipient name, phone, and delivery address — collected through Shopify checkout, our Shopify-based customer accounts, or manual/WhatsApp orders.
- BNPL: we do not collect or store your national ID or M-Pesa statements. That information is given directly to our third-party BNPL partner, in person, as part of their own credit assessment — see our BNPL Credit Terms for how that works and whose privacy practices apply to it.
- AI concierge interactions: text and voice messages you send to our shopping concierge. If you are signed in, your conversation history is saved so the concierge can refer back to it; if you are not signed in, it is not saved between sessions.
- Usage/analytics data: standard website analytics (pages viewed, device/browser information) collected via Google Analytics.
2. Why we use it
- To process and deliver your orders, and to send invoices and receipts.
- To provide customer support and respond to enquiries sent via WhatsApp or email.
- To calculate and show you indicative BNPL plan figures, and refer you to our BNPL partner.
- To operate and improve the AI shopping concierge.
- To understand site usage and improve the shopping experience.
3. Who we share it with
We share personal data with the following service providers, each under their own terms:
- Shopify — order processing, payment capture, and (if you sign in) customer accounts.
- Google (Vertex AI / Gemini, Firestore, Google Analytics)— powers the AI concierge and stores signed-in users' concierge conversation history; Google Analytics collects anonymised usage statistics.
- Resend — delivers transactional emails such as invoices and receipts.
We do not sell your personal data. We do not store full payment card details ourselves — that is handled entirely by Shopify.
4. Cookies and analytics
Our site uses Google Analytics cookies to understand how visitors use the site. We do not currently show a cookie-consent banner; if this matters for your jurisdiction or risk tolerance, you can control cookies through your browser settings.
5. Data retention
We retain order, invoice, and delivery records for as long as needed for accounting, warranty, and legal purposes. Signed-in concierge conversation history is retained until you request its deletion or close your account.
6. Your rights
Under the Kenya Data Protection Act, 2019, you may request access to, correction of, or deletion of your personal data, or object to certain processing. To make a request, contact us using the details below — we do not currently offer a self-service deletion tool, so requests are handled manually.
7. Children
Our site and BNPL plans are intended for users aged 18 and over. We do not knowingly collect personal data from children.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.
9. Contact
For privacy requests or questions:
Email legal@nuruelectronics.com or message us on WhatsApp.
Or write to our registered address at 147, Nairobi, Kenya, Kenya.