Privacy Policy

Last updated: 28 October 2025

Welcome to Lux Baby Shop. We respect your privacy and value the trust you place in us when you shop or browse at https://luxbabyke.com.
This policy explains what information we collect, how we use it, and the rights you have under the Data Protection Act, 2019 (Kenya).

By visiting our website or purchasing from us, you agree to this policy.

1. Who we are

Lux Baby Shop is a Kenyan retail business offering family, women’s, men’s, baby and children’s products.
Email: luxbabyke@gmail.com
Phone/WhatsApp: +254 798 949 754
Address: Krishna Centre, Ground Floor, Suite A7
Website: https://luxbabyke.com

We are the data controller for information collected through our website and related services.

2. The information we collect

We collect data so we can process orders, communicate effectively, and improve your experience.

A. Information you give us

Contact details: name, email, phone number, and delivery address.
Payment details: M-Pesa reference or card payment confirmation (handled securely by our payment provider).
Account information (if you create one): login details and order history.
Messages you send us by email, WhatsApp, or website forms.
Marketing preferences when you subscribe to updates or promotions.
Product reviews, ratings, or comments you post.

B. Information we collect automatically

Device and browser type, operating system, and IP address.
Pages viewed, time on site, and referring links.
Cookies and similar technologies that help the site function and measure performance.

We do not intentionally collect sensitive data such as health or political information.

3. How we use your information

We use personal data only for clear, lawful reasons:

To confirm and deliver your orders.
To process payments securely.
To provide customer support.
To send order confirmations, invoices, and delivery updates.
To send marketing updates if you’ve opted in.
To improve our products and website.
To comply with tax and record-keeping requirements.

We never sell or rent your personal information.

4. Our legal basis for using your data

Under the Data Protection Act we process data on these bases:

Contract: to fulfil your purchase.
Consent: for marketing or optional cookies.
Legal obligation: to meet tax or accounting requirements.
Legitimate interest: to prevent fraud and improve services.

You can withdraw consent anytime — see Section 10.

5. Marketing communications

If you opt in, we may send:

Emails about new arrivals, restocks, or promotions.
WhatsApp updates on orders, restocks, or exclusive offers.

To stop receiving marketing:

Click “Unsubscribe” in any email.
Reply “STOP” to WhatsApp messages.
Or email luxbabyke@gmail.com.

You’ll still receive essential service messages (e.g. order confirmations).

6. Cookies

Cookies are small text files stored on your device.
We use them to keep your cart active, remember preferences, and analyse traffic.

Types of cookies

Essential cookies: for checkout, security, and basic functions.
Analytics cookies: to understand site performance.
Marketing cookies: only used if you consent.

You can control cookies in your browser settings.
Disabling some may affect site performance.

7. How we share data

We share limited information with trusted service providers who help us operate:

Delivery services: Pickup Mtaani, Wells Fargo, DHL, and other courier companies you choose.
Payment processors: M-Pesa and card-payment gateways.
Platform hosts: Shopify Inc. and technical support tools.
Regulators or authorities: if required by law.

These providers process data only as needed and must keep it secure.

8. How long we keep information

Order and payment records – 7 years (for accounting/legal purposes).
Customer messages – up to 12 months after resolution.
Marketing data – until you withdraw consent.
After this, we delete or anonymise your data securely.

9. How we protect your information

We use secure systems and procedures:

HTTPS/SSL encryption on all pages.
Restricted staff access.
Secure payment gateways that do not expose full card data.
Regular data backups and password-protected systems.

While no system is completely immune, we take reasonable steps to protect your data from loss, misuse, or unauthorised access.

10. Your rights under the Data Protection Act (2019)

You have the right to:

Be informed about how we use your data.
Access the information we hold about you.
Request correction of inaccurate data.
Object to processing or request restrictions.
Withdraw consent for marketing or cookies.
Request deletion (“right to be forgotten”) when data is no longer needed.
Complain to the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been breached.

To exercise these rights, email luxbabyke@gmail.com or WhatsApp +254 798 949 754.
We may ask for proof of identity before processing certain requests.

11. Children’s privacy

Our website and checkout are intended for adult use.
We do not knowingly collect data from children under 18.
If you believe a child’s data was provided without consent, contact us, and we will delete it.

12. International transfers

Our store runs on Shopify, whose servers may be outside Kenya.
Shopify applies industry-standard safeguards and complies with recognised data-protection frameworks to ensure your information remains secure.

13. Changes to this policy

We may update this Privacy Policy occasionally.
The “Last updated” date will show the latest version.
Material changes will be announced on our site before they take effect.

14. Contact us

If you have any questions or concerns about this policy or how we handle your information, please contact:

Lux Baby Shop
Email: luxbabyke@gmail.com
Phone/WhatsApp: +254 798 949 754
Address: Krishna Centre, Ground Floor, Suite A7

Thank you for shopping with Lux Baby. We appreciate your trust in us.