The Stafriq Hub Logo
The Stafriq Hub
Kenya's Tech & Gaming Store
Regulatory FrameworkKenya DPA 2019

Privacy Policy & Data Protection

How The Stafriq Hub (Accra Plaza, Accra Road, Nairobi CBD) processes, safeguards, and respects your personal data in strict compliance with Kenyan privacy laws and the ODPC.

1Statutory Basis & ODPC Compliance

The Stafriq Hub operates strictly within the principles set forth in Section 25 of the Kenya Data Protection Act, 2019:

  • Lawfulness, Fairness, and Transparency: We process customer personal data fairly and openly without deceptive collection practices.
  • Purpose Limitation: Personal data is collected exclusively to fulfill orders, arrange delivery or shop collection at Accra Plaza, and record device warranties.
  • Data Minimisation: We request only the data necessary to communicate and verify pickup (such as your phone number and full name).
  • Accuracy & Storage Limitation: Customer records are kept current and retained only as long as required to honor manufacturer warranties and accounting records.
  • Integrity and Confidentiality: Data is shielded from unauthorized access, loss, or alteration.

2Personal Data We Collect

When you browse our catalog, submit an inquiry, reserve items, or visit our Accra Plaza shop, we may collect:

Direct Inquiry & Order Data

Full name, mobile telephone numbers (+254), WhatsApp messaging threads, requested hardware models, and custom notes.

Transaction & Pickup Data

M-Pesa confirmation reference codes, order and delivery dates, and device serial numbers recorded upon order fulfillment.

Note: We do not store sensitive payment credentials, credit card numbers, or PINs. All M-Pesa transactions are conducted securely between the customer and the official Safaricom till/paybill infrastructure.

3Lawful Basis for Processing

Under Section 30 of the Kenya Data Protection Act, we process your information on the following legal grounds:

  • Performance of Contract: Facilitating order processing, reserving inventory at Accra Plaza, and validating proof of collection.
  • Consent: When you initiate a WhatsApp conversation or submit our contact form for price quotes.
  • Legal Obligation: Tax documentation, commercial invoice preservation under Kenya Revenue Authority (KRA) laws, and consumer warranty compliance.

4Your Rights Under the Kenya DPA 2019

Pursuant to Section 26 of the Act, every customer has enforceable rights regarding their personal data:

Right to Access & RectificationYou may request a copy of your stored order/warranty history or ask us to correct inaccurate records at any time.
Right to Erasure (“Right to be Forgotten”)You can request the deletion of your WhatsApp communication records and contact details once pending orders and warranty obligations expire.
Right to Object & Restrict ProcessingYou have the unconditional right to opt out of promotional broadcasts or stock alert announcements.

5Zero Third-Party Data Sharing or Sale

The Stafriq Hub does not sell, rent, trade, or monetize customer telephone numbers, names, or transaction histories to third-party marketing companies, data aggregators, or unauthorized third parties.

Data is disclosed only to law enforcement authorities where legally mandated by an official warrant issued by a competent Kenyan court of law.

Exercising Your Rights & ODPC Inquiries

To exercise any of your statutory rights under the 2019 DPA or submit an inquiry regarding your data, contact our designated privacy representative:

Physical Office: Accra Plaza, Accra Road, Nairobi CBD

Direct Phone Lines: +254 715 288 364 / +254 702 086 945

Email Address: info@stafriq.co.ke

National Supervisory Authority: Office of the Data Protection Commissioner (ODPC Kenya), Britam Tower, 13th Floor, Hospital Road, Upper Hill, Nairobi.

View Cookie Policy →View Refund Policy →