Privacy policy

1. Who we are

Noorcom Electronics (“Noorcom”, “we”) is the data controller for the personal data described here. You can reach us at Chuka Elimu Plaza, 1st Floor, Loita Street, Nairobi, on +254 722 723 352 or at info@noorcom.co.ke.

Registration with the Office of the Data Protection Commissioner: [registration number to be added].

2. What we collect

• Your name and phone number, to process your order, send the M-Pesa request and text you order updates.
• Your email address, if you give one, to send receipts and invoices.
• Your delivery address, landmark and notes, so our riders can find you.
• Your company name and KRA PIN, only if you ask for a business invoice.
• Your order history: what you bought, what you paid, M-Pesa receipt numbers and delivery status.
• Messages you send us through the contact and repair forms, WhatsApp, phone or email.
• Basic technical data such as your browser type and pages visited, to keep the site working and secure.

We do not collect or store your M-Pesa PIN. Payment is approved on your phone with Safaricom.

3. Why we use it (lawful basis)

• To perform our contract with you: taking payment, delivering or preparing your order, warranty claims and returns.
• To meet legal obligations: tax records and invoices required by the Kenya Revenue Authority.
• For our legitimate interests: preventing fraud, securing the site and improving our service.
• With your consent: marketing messages, which you can refuse or withdraw at any time. We do not send marketing unless you opt in.

4. Who we share it with

• Safaricom (M-Pesa), to process your payment. Safaricom receives your phone number and the amount.
• Our delivery riders, who receive your name, phone number and delivery address for your order only.
• Manufacturers, when we make a warranty claim on your behalf.
• Our hosting, SMS and email providers, who process data only on our instructions.
• Authorities such as the Kenya Revenue Authority, where the law requires it.

We do not sell your personal data.

5. How long we keep it

• Order and invoice records: for the period tax law requires (currently at least five years).
• Warranty records: for the warranty period plus [period to be confirmed].
• Enquiries that do not lead to an order: [period to be confirmed], then deleted.

6. Your rights

Under the Data Protection Act you have the right to be informed about how your data is used, to access it, to have it corrected or deleted, to object to its use, and to receive it in a portable format. Some records, such as tax records, we must keep even if you ask us to delete them.

To make a request, email info@noorcom.co.ke or visit the shop, with your name and the phone number you ordered with. We reply within [period to be confirmed]. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner.

7. Security and transfers

We protect your data with access controls and encrypted connections. Some of our service providers may store data outside Kenya; where they do, we make sure appropriate safeguards are in place as the Act requires.

8. Cookies and storage on your device

The site stores your cart and checkout progress in your browser so they survive a page reload. We do not use advertising cookies. If analytics are added, this policy will be updated first.