Privacy Policy

Effective Date: January 2025 | Last Updated: January 2025

At LulaBela, your privacy is sacred. We are committed to protecting your personal data and being transparent about how we collect, use, and protect information.

This Privacy Policy explains:

  • What information we collect and why
  • How we use and protect your data
  • Your rights regarding your information
  • How long we keep your data
  • How to contact us about privacy

We comply with applicable data protection laws including the Kenya Data Protection Act and international privacy standards. If you have concerns, contact us at Hello@LulaBela.com or 0716 491 699.

1. Information We Collect

Information You Provide:

  • Account details: name, email, phone number, password
  • Billing & shipping information: address, payment details (processed securely)
  • Order history: products purchased, quantities, preferences
  • Communications: emails, phone calls, chat messages
  • Feedback: product reviews, surveys, testimonials

Information Collected Automatically:

  • Device information: type, operating system, browser type
  • Browsing data: pages visited, products viewed, time spent
  • Cookies & tracking technologies: site usage patterns, preferences
  • Log data: IP address, access times, referral sources
  • Location data: approximate location based on IP (not precise)

2. How We Use Your Information

Order Processing & Fulfillment:

  • Processing purchases and payments
  • Shipping and delivery confirmation
  • Handling returns and refunds
  • Customer service and support

Communication:

  • Order updates and status
  • Responding to inquiries
  • Sending newsletters (only if you opt-in)
  • Promotions and special offers (with your consent)

Note: We never sell your personal information. We do not use your data for purposes beyond what you authorized.

3. Data Sharing & Third Parties

Service Providers (bound by confidentiality):

  • Payment processors (Stripe, M-Pesa, etc.)
  • Email providers (for newsletters)
  • Shipping & logistics partners
  • Hosting & analytics providers
  • Customer support platforms

These providers process data only on our behalf and cannot use your data for their own purposes. They must implement security measures and are contractually bound by confidentiality agreements.

Legal Requirements:

We may disclose information if required by law: compliance with court orders, government requests, enforcement of our Terms of Service, or protection of legal rights or safety.

4. Data Security & Protection

Technical Measures:

  • SSL/TLS encryption for all data in transit
  • Secure payment processing (PCI DSS compliant)
  • Regular security audits and penetration testing
  • Firewalls and intrusion detection systems
  • Secure password storage (hashing algorithms)

Operational Measures:

  • Limited employee access (need-to-know basis)
  • Employee confidentiality agreements
  • Regular security training
  • Incident response procedures
  • Data breach notification protocols

Note: While we implement robust security, no system is 100% secure. We cannot guarantee absolute security against all cyber threats.

5. Your Privacy Rights

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of all data we hold about you
  • Right to Correction: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data (subject to legal retention obligations)
  • Right to Restrict Processing: Request we limit how we use your data
  • Right to Data Portability: Request your data in a structured, portable format
  • Right to Opt-Out: Unsubscribe from marketing emails, disable cookies, withdraw consent

Exercising Your Rights:

Submit requests to Hello@LulaBela.com with a clear description of what you’re requesting, your full name, and email address. We respond within 30 days. Complex requests may take up to 60 days. Requests are free unless frivolous or excessive.

6. Data Retention & Deletion

Retention Periods:

  • Account information: Until you delete your account
  • Transaction data: 7 years (legal & financial compliance)
  • Marketing communications: Until you unsubscribe
  • Browsing/cookie data: Up to 2 years
  • Customer support records: 3 years
  • Backup data: Up to 30 days after deletion

Deleting Your Data:

You can request data deletion by emailing Hello@LulaBela.com with “Data Deletion Request” in the subject, including your account email and confirmation. We will process within 30 days.

Limitations: Some data may be retained for legal compliance. Backup copies may persist briefly. Anonymized data for analytics may be retained. Payment processor records are retained per their policies.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies:

  • Essential Cookies: Enable basic site functionality, remember login information, process transactions
  • Performance Cookies: Track site usage analytics, identify error pages, measure page load times
  • Marketing Cookies: Remember products viewed, display personalized recommendations
  • Preference Cookies: Remember language preference, store shopping preferences

Controlling Cookies:

You can control cookies through browser settings (accept/reject by type), our cookie consent banner, or your account preferences. Note: Disabling essential cookies may limit site functionality.

Last Updated: January 2025 | Version: 1.0

Your privacy is our priority. By using LulaBela.com, you acknowledge that you have read and understood this Privacy Policy.

Terms of Service | Return Policy | Contact Us

Email us at Hello@LulaBela.com or call 0716 491 699 with any privacy concerns.