Privacy Policy

1. Introduction

Waterlift Energy Limited (Reg. No. PVT-ZQULAQD8) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, create an account, place an order, contact us, subscribe to our newsletter, or interact with our online services.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We may collect personal information in the following situations:

Orders and Customer Accounts

When you place an order or create an account, we may collect:

• Name
• Email address
• Phone number
• Delivery address
• Billing information
• Order details
• Payment confirmation details
• Account login details, where applicable

Contact Forms and Enquiries

When you submit an enquiry through our website, WhatsApp, email, phone, or contact form, we may collect:

• Name
• Email address
• Phone number
• Message content
• Any additional details you choose to provide

Newsletter and Marketing

When you subscribe to our mailing list, we may collect:

• Email address
• Name, where provided
• Marketing preferences

You may unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us directly.

Website and Usage Data

We may collect technical and usage data such as:

• Pages visited
• Products viewed
• Device type and browser type
• Approximate location
• Referral source and website interactions
• Anonymised or aggregated analytics data

This information helps us improve website performance, user experience, and advertising effectiveness.

3. How We Use Your Information

We use your information for the following purposes:

• To process, confirm, and fulfil your orders
• To communicate with you about your order, delivery, returns, refunds, or installation requests
• To process payments through our payment service provider
• To respond to enquiries submitted through our website or contact channels
• To send newsletters and promotional messages where you have subscribed or where permitted by law
• To improve our website, products, services, customer support, and advertising performance
• To prevent fraud, misuse, unauthorised transactions, or security threats
• To keep business, tax, accounting, and legal records
• To comply with applicable laws and regulatory requirements

We do not sell your personal data to third parties.

4. Legal Basis for Processing

We process personal data where it is necessary for:

• Performing a contract with you, such as processing and delivering your order
• Complying with legal, accounting, tax, and regulatory obligations
• Responding to your enquiries and service requests
• Improving our website and services
• Sending marketing communications where consent has been given or where permitted by law
• Protecting our business, customers, website, and payment systems from fraud or misuse

Where consent is required, you may withdraw your consent at any time.

5. Cookies and Client-Side Tracking

Our website may use cookies and similar technologies to support website functionality, analytics, advertising, and user experience.

We use tools such as Google Tag Manager, Google Analytics 4, and Google Ads conversion tracking to understand website usage and measure advertising performance.

Where required, analytics and advertising cookies will be managed through the website cookie consent banner. You may accept, reject, or manage your cookie preferences through the consent banner where available.

Declining non-essential cookies may limit analytics and advertising tracking, but necessary cookies required for website operation, checkout, security, and payment processing may still be used.

6. Server-Side Order and Conversion Data

After a successful order or payment, limited order and conversion data may be processed for order confirmation, accounting, fraud prevention, analytics, and advertising performance measurement.

This may include:

• Order reference
• Order value
• Products purchased
• Transaction status
• Payment confirmation status

Where such data is shared with analytics or advertising platforms, we aim to limit the information shared and avoid sending unnecessary personal identifiers. Server-side tracking and conversion measurement will be handled in accordance with applicable data protection requirements and customer consent preferences where required.

7. Third-Party Data Sharing

We may share necessary information with trusted third parties who help us operate our business, process orders, provide payment services, deliver products, measure website performance, or advertise our products.

PesaPal

We share necessary order and customer details with PesaPal to process payments. This may include your name, email address, phone number, order value, and order reference. Waterlift Energy does not store your card details or M-Pesa PIN on our servers.

Google Analytics 4 and Google Ads

We may use Google Analytics 4 and Google Ads to measure website usage, conversions, and advertising performance. Data shared with Google may include usage data, conversion data, product information, order value, and related technical information.

Google Merchant Center

We may share product data through an automated product feed to display our products on Google Shopping and related Google services. Product data may include product names, prices, images, descriptions, stock status, and product links.

Delivery, Logistics, and Installation Partners

Where necessary, we may share delivery or installation information with logistics teams, technical teams, or service providers to fulfil your order or requested service.

8. Payment Processing

Payments are processed securely through PesaPal. We do not store your card details, bank login details, or M-Pesa PIN on our servers. Payment information is processed by PesaPal in accordance with its own privacy and security standards.

9. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Order and transaction records: retained for up to seven years for accounting, tax, audit, and legal compliance
• Contact form enquiries: retained for up to two years, unless further retention is needed for customer service or legal purposes
• Newsletter subscriptions: retained until you unsubscribe or request deletion
• Customer account data: retained until you request deletion, subject to legal and business record requirements
• Website analytics data: retained according to the settings of the relevant analytics platforms

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no website, payment system, or internet transmission is completely secure. Customers are encouraged to use strong passwords and keep account login details confidential.

11. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Be informed about how your personal data is used
• Access personal data we hold about you
• Request correction of inaccurate or misleading personal data
• Request deletion of false, misleading, or unnecessary personal data
• Object to the processing of all or part of your personal data
• Withdraw consent where processing is based on consent

To exercise your rights, contact us at info@waterliftenergy.africa. We may need to verify your identity before processing your request.

12. Marketing Communications

We may send newsletters, offers, product updates, and promotional messages to customers or subscribers where permitted.

You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly. Opting out of marketing messages does not stop important service messages related to orders, payments, deliveries, returns, refunds, or customer support.

13. Children's Privacy

Our website is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so that we can review and take appropriate action.

14. International Data Transfers

Some third-party service providers, including analytics, advertising, payment, hosting, or cloud service providers, may process or store data outside Kenya.

Where personal data is transferred or processed outside Kenya, we aim to ensure that appropriate safeguards are applied in line with applicable data protection requirements.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, legal requirements, or data handling practices.

The updated version will be posted on this page with the revised "Last updated" date.

16. Contact Us

For privacy concerns, data requests, or questions about this Privacy Policy, contact Waterlift Energy Limited through: