Privacy Policy

2. The Data We Collect

We collect personal information necessary to fulfill orders, verify warranties, combat counterfeit fraud, and provide seamless delivery across Kenya.

Information You Provide Directly

• Identity & Account Information: Your full name, preferred salutation, email address, mobile phone number, and encrypted account password.
• Delivery & Shipping Data: Your physical residential or commercial delivery address, building name, floor/unit number, street name, town/city, county, and relevant delivery landmarks (or specific parcel pickup office / matatu stage details for upcountry deliveries).
• Payment & Transaction Data: Mobile money transaction identifiers (M-Pesa confirmation codes, transaction timestamps, and amounts paid) — Nimax Electronics operates on a Pay-on-Delivery basis (cash or M-Pesa send-money at delivery); we do not publish a till/paybill number or process card payments at this time. We never process or store raw credit card numbers or banking passwords on our servers.
• Customer Support & Communications: Inquiries, technical assistance logs, and warranty claim descriptions submitted via our contact forms, direct telephone calls, SMS, or our official phone/WhatsApp number, +254798880065.

Information Collected Automatically

• Device & Connection Telemetry: Your Internet Protocol (IP) address, operating system, browser type, device brand/model, and browser language settings.
• Browsing Analytics: Clickstream data, pages viewed, time spent examining specific products, referring URLs, and search queries within our internal catalog.
• Cookies & Local Storage: Essential session cookies to maintain your shopping cart contents and authentication status across browser tabs.

3. Lawful Basis for Processing Personal Data

Under Section 30 of the Kenya Data Protection Act, 2019, Nimax Electronics processes your personal data strictly on the following lawful bases:

1. Contractual Performance: To process transactions, verify payments, dispatch couriers, deliver electronics, and fulfill post-sale manufacturer warranty obligations.
2. Legal Obligation: To maintain accurate financial books, tax records, and invoicing compliant with Kenya Revenue Authority (KRA) electronic tax invoice management system (eTIMS) requirements.
3. Legitimate Business Interests: To detect fraud, prevent unauthorized chargebacks, and maintain the cybersecurity of our systems.
4. Explicit Consent: For promotional marketing, SMS newsletters, and WhatsApp product alerts where you have opted in. You retain the right to withdraw consent at any time.

4. How We Use Your Information

• Processing and delivering your smartphone, accessory, and audio equipment orders.
• Sending transactional notifications via SMS or WhatsApp (e.g., order dispatch updates).
• Authenticating product IMEI numbers and serial codes during warranty claims.
• Providing responsive customer service and technical advice on device compatibility.
• Complying with statutory reporting requirements under the laws of Kenya.

5. Sharing & Disclosure of Personal Data

Nimax Electronics never sells, rents, or trades customer personal data to third-party data brokers or marketing agencies. We disclose data strictly to vetted service partners on a need-to-know basis:

• Logistics & Courier Partners: Our courier partners — G4S, Wells Fargo, Speedaf, and PSV parcel services — receive your name, phone number, and physical drop-off destination solely to complete deliveries.
• Payment Gateways & Telecommunications Providers: Safaricom PLC (M-Pesa) to confirm receipt of funds.
• Manufacturer Service Centres: Where a product's manufacturer operates a local service centre and your claim is routed there directly (see our Return, Refund & Warranty Policy), relevant details are shared with that manufacturer's service centre to process your claim. Nimax Electronics is not an authorized retailer or partner of any brand — this sharing happens only when a claim is routed to the manufacturer's own, independent service centre.
• Law Enforcement & Regulatory Authorities: When formally mandated by a lawful warrant, court order, or formal request from the Directorate of Criminal Investigations (DCI) or the ODPC pursuant to Kenyan law.

6. International Data Transfers

Our servers and operational databases are securely hosted on cloud infrastructure adhering to international security standards (ISO 27001 / SOC 2). Where customer data is transferred or backed up outside Kenya, we ensure that the recipient jurisdiction maintains data protection regulations comparable to the Kenya Data Protection Act 2019, or that binding contractual agreements enforce equivalent protections.

7. Data Retention Policy

• Order & Financial Records: Retained for seven (7) years to comply with KRA tax compliance and commercial audit statutes.
• Warranty Registration Data: Retained for the duration of the active warranty period plus six (6) months to handle post-warranty service history.
• Marketing Consent Data: Retained until you opt out or unsubscribe.
• Inactive User Accounts: Accounts dormant for over twenty-four (24) months are scrubbed or permanently anonymized.

8. Your Statutory Rights as a Data Subject

Under the Kenya Data Protection Act 2019, you enjoy explicit rights regarding your personal information:

1. Right to be Informed: To know how your data is collected, handled, and shared.
2. Right of Access: To request a copy of the personal information Nimax Electronics holds concerning you.
3. Right to Rectification: To require us to correct inaccurate, misleading, or outdated personal information.
4. Right to Erasure: To request deletion of your personal data where its retention is no longer supported by a lawful processing basis.
5. Right to Object / Restrict Processing: To opt out of direct promotional marketing communications at any time.
6. Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, contact us at sales@nimax.co.ke. We will acknowledge and address your request within thirty (30) days as stipulated by ODPC guidelines.

9. Information Security Measures

• Encryption: 256-bit Secure Socket Layer (SSL/TLS) encryption on all website traffic.
• Access Control: Role-based access restrictions limiting customer database access strictly to authorized support and dispatch personnel.

10. Contacting Our Data Protection Team

If you have questions, feedback, or complaints regarding this Privacy Policy or our compliance with Kenyan data laws, please contact us:

You also have the statutory right to lodge an inquiry or complaint directly with the Office of the Data Protection Commissioner of Kenya.