1. Introduction

This Privacy Policy explains how Nollamax Enterprises Ltd (“we”, “us”, “our”, or “Nollamax”) collects, uses, discloses, stores, and protects personal information when you visit or make a purchase from our website at https://nollamax.co.ke (the “Website” or “Store”).

Nollamax Enterprises Ltd operates an e-commerce platform powered by WordPress and WooCommerce, offering beekeeping equipment, Langstroth hives, Kenya Top Bar hives, honey extractors, sting-proof protective clothing, beeswax products, and raw honey. We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection regulations in Kenya and East Africa.

2. Information Collected

Depending on how you interact with our Website, we may collect and process the following categories of personal data:

• Contact Information: Full name, company or organization name, email address, phone number, WhatsApp number.
• Billing & Delivery Information: Billing address, physical delivery address, county, town, postal code.
• Account Credentials: Username, password hash, account preferences (when an account is created).
• Order & Transaction Details: Products ordered, order date, order value, payment status, invoice records.
• Customer Support Data: Enquiries sent via contact forms, WhatsApp, phone, or email; customer service notes.
• User Content: Product reviews, feedback, photos, or RFQ documents uploaded to our Website.
• Technical & Device Data: IP address, browser type, operating system, referrer URL, device identifiers, timestamp of visit.
• Cookie & Usage Data: Pages viewed, products added to cart, session duration, interaction metrics.

3. How Information Is Collected

We collect personal information directly from you or automatically through your device when you:

• Register a customer account on our Website.
• Place an order through our WooCommerce checkout.
• Fill out contact forms, quote requests, or technical enquiry forms.
• Subscribe to our newsletter or promotional communications.
• Communicate with our sales or technical support team via WhatsApp, phone, or email.
• Submit product reviews or feedback.
• Browse our Website via cookies, web beacons, and server logs.

4. Purposes of Processing

We use your personal data for the following specific business purposes:

• Fulfilling Orders: Processing checkout transactions, packaging products, issuing invoices, and delivering equipment to your location.
• Customer Service: Responding to enquiries, providing technical advice, processing warranty requests, and managing after-sales support.
• Account Management: Maintaining your registered customer account and order history.
• Fraud Prevention & Security: Verifying transaction authenticity, preventing fraudulent orders, and safeguarding website security.
• Marketing & Promotions: Sending newsletter updates, promotional offers, and product releases (only where opt-in consent exists).
• Website Improvement: Analyzing visitor behavior, monitoring site performance, and refining user experience.

5. Legal Basis for Processing

Our legal grounds for processing personal data under the Kenya Data Protection Act, 2019 (KDPA) include:

• Performance of a Contract: Necessary to process and deliver your order under our Terms and Conditions.
• Consent: Where you have explicitly opted in (e.g., newsletter subscriptions or cookie tracking).
• Legitimate Interests: Fulfilling legitimate commercial operations, website security, and improving customer services.
• Legal Obligations: Compliance with applicable tax, accounting, or regulatory requirements in Kenya.

6. WooCommerce Data Storage

Our store is built on WooCommerce. When you place an order, WooCommerce stores your cart items, order history, billing and shipping details, and account metadata within our WordPress database.

WooCommerce uses cookies to keep track of cart contents while you browse the site. Essential session cookies include woocommerce_items_in_cart and woocommerce_cart_hash.

7. Payment Providers

We offer multiple secure payment methods. Nollamax Enterprises Ltd does not directly store full payment card numbers or M-Pesa PIN numbers on our web servers. Transactions are processed securely by our integration partners:

• M-Pesa (Safaricom): Mobile money transactions processed via official Safaricom Daraja API or approved gateway. Phone numbers and transaction codes are recorded to verify payment status.
• Bank Transfer (EFT / RTGS): Payment confirmation receipts and bank payment references processed directly via our banking partners.
• Card Payments (Visa / Mastercard): Processed via an authorized PCI-DSS compliant payment gateway.
• Cash on Collection: Applied under specific pre-approved conditions for local pickup at our Kenol Centre premises.

8. Delivery & Transport Providers

To deliver your beehives, extractors, protective wear, or equipment orders across Kenya and East Africa, we share necessary delivery details (recipient name, physical address/town, contact phone number) with third-party logistics partners, including courier services (e.g. Fargo Courier, G4S), regional transport operators, or freight hauliers.

9. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and optimize our Website:

• Essential Cookies: Required for core site functions, such as security, user authentication, and accessibility.
• WooCommerce Shopping Cart Cookies: Temporary cookies used to maintain your cart contents during shopping.
• Login & Session Cookies: Maintain logged-in state for registered account holders.
• Analytics Cookies: Collect anonymous aggregate metrics on site usage and traffic sources.

10. Marketing Communications

If you subscribe to our newsletter or opt in during checkout, we may send you emails or messages regarding new beekeeping equipment, offers, and training events. You can opt out or unsubscribe at any time by clicking the “Unsubscribe” link in any promotional email or by contacting us at info@nollamax.co.ke.

11. Data Sharing & Security

We do not sell, rent, or trade your personal data. We share personal data only with payment gateways, couriers, and hosting infrastructure providers bound by strict confidentiality requirements.

We implement technical and organizational security measures, including SSL encryption (HTTPS), firewalls, and access controls, to safeguard your data.

12. Customer Rights

Under the Kenya Data Protection Act, 2019, you have the right to access, correct, or request deletion of your personal data, object to processing, or lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

13. Contact Details

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Nollamax Enterprises Ltd
Along the superhighway, Kenol Town, Murang’a County, Kenya
Email: info@nollamax.co.ke
Phone / WhatsApp: 0791 053 010