Draft notice: this policy is a starting draft covering the data this store actually collects. It has not been reviewed by counsel and should be reviewed against the Kenya Data Protection Act, 2019 and any ODPC registration requirements before this store handles customer data in production.

Privacy Policy

Last updated: 01 October 2026

HydroLink Africa ("we", "us", "our") operates this website and the services offered on it. This policy explains what personal data we collect, why, and the rights you have over it under the Kenya Data Protection Act, 2019.

1. Data we collect

Account and contact details — name, email address, phone number, and (optionally) company name and KRA PIN, when you register or check out.
Delivery addresses — address line, city, and county, for order fulfilment.
Order and quote history — items purchased or requested, quantities, and prices.
Payment confirmation data — M-Pesa transaction references and receipt numbers, received from Safaricom. We do not receive or store your M-Pesa PIN or full payment card details.
Subscription billing data — for SaaS plans, your billing cycle and renewal dates.

2. Why we process your data

We process your data to: create and manage your account; process orders, quotes, and subscription renewals; send order, payment, and shipping notifications by SMS and email; respond to support requests; and meet our own tax and accounting obligations.

3. Who we share it with

Safaricom (M-Pesa Daraja API) — to process mobile money payments and renewals.
Emalify — to send transactional SMS notifications (order and payment confirmations).
Resend — to send transactional email (receipts, invoices, quotes).

We do not sell your personal data to third parties.

4. How long we keep it

We retain order, invoice, and payment records for as long as required for tax and accounting purposes. Account data is retained until you request deletion, subject to our legal obligation to keep financial records.

5. Your rights

Under the Data Protection Act, 2019, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to our legal retention obligations; object to or restrict certain processing; and lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

You can view and update your account details, addresses, and subscriptions at any time from your account settings, or request account deletion from the same page.

6. Cookies

We use a session cookie to keep you signed in and to remember your cart. If Google Analytics is enabled on this site, it may set additional cookies to measure site usage.

7. Contact us

For any privacy questions or to exercise your rights, contact us at or .