Legal
Privacy Policy
Last updated: June 25, 2026 · Effective: June 25, 2026
Batteriq Solutions Ltd (“Batteriq”, “we”, “our”, or “us”) is Kenya's official authorised EcoFlow and BLUETTI dealer, operating at batteriq.com. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy explains what information we collect, how we use it, with whom we share it, how long we keep it, and the rights you have over your data.
By using batteriq.com or placing an order with us, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or services.
1. Who We Are
Batteriq Solutions Ltd is the data controller responsible for your personal information collected through this website and our business operations.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide Directly
- Order information: Full name, email address, phone number, delivery address (street, city, county), product selections, and payment method.
- M-Pesa payment data: Your phone number used to initiate the M-Pesa STK Push payment. We do not store your M-Pesa PIN. Payment confirmation codes (transaction references) are stored as proof of payment.
- Contact form submissions: Name, email, phone number, and the content of your message when you contact us through our website.
- Newsletter sign-ups: Email address and, optionally, your name when you subscribe to our newsletter.
- Warranty registrations: Product details, purchase date, and contact information when you register a product warranty.
- Reviews and feedback: Your name and written feedback when you submit a product review.
2.2 Information Collected Automatically
- Device and browser data: Device type (mobile, tablet, desktop), browser type and version, operating system.
- Usage data: Pages visited, time spent on pages, products viewed, search queries entered on the site.
- Session identifiers: A temporary anonymous session ID stored in your browser's sessionStorage (not cookies) to track your visit for analytics. This is deleted when you close your browser tab.
- Referral source: How you arrived at batteriq.com (e.g., Google, Facebook, Instagram, direct visit). This is derived from your browser's referrer header.
- IP address: Used for rate limiting (preventing abuse), fraud detection, and approximate geolocation (country/city level only).
2.3 Information We Do NOT Collect
- We do not store your M-Pesa PIN or full bank account details.
- We do not use persistent tracking cookies for advertising purposes.
- We do not collect biometric data, national ID numbers, or government identification.
- We do not sell your personal data to third parties.
3. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Process and fulfil your orders | Contract performance |
| Send order confirmation emails and payment receipts | Contract performance |
| Send M-Pesa STK Push payment prompts to your phone | Contract performance |
| Issue eTIMS KRA invoices for tax compliance | Legal obligation |
| Respond to your support and warranty enquiries | Contract performance / Legitimate interest |
| Send newsletter and promotional emails (with consent) | Consent |
| Detect and prevent fraud, abuse, and unauthorised access | Legitimate interest |
| Analyse website traffic and improve our services | Legitimate interest |
| Display live visitor counts in our admin dashboard (anonymised) | Legitimate interest |
| Comply with Kenyan tax and business regulations | Legal obligation |
4. M-Pesa Payment Processing
Batteriq processes payments via the Safaricom M-Pesa Daraja API. When you make a payment:
- Your phone number is shared with Safaricom PLC to initiate the STK Push payment prompt.
- The transaction amount and merchant reference are shared with Safaricom.
- Upon successful payment, Safaricom sends us a callback containing your M-Pesa transaction code, which we store as proof of payment.
- Your M-Pesa PIN is entered directly on your phone and is never transmitted to or seen by Batteriq.
- Safaricom's own Privacy Policy governs their processing of your payment data. Visit safaricom.co.ke for details.
5. Sharing Your Information
We do not sell your personal data. We share your information only with trusted service providers who help us operate our business, and only to the extent necessary:
Safaricom PLC
Purpose: M-Pesa payment processing
Data shared: Phone number, payment amount, transaction reference
Location: Kenya
Supabase Inc.
Purpose: Database and real-time infrastructure
Data shared: Order data, customer information, product data
Location: Ireland (EU) / USA
Vercel Inc.
Purpose: Website hosting and deployment
Data shared: IP addresses, request logs
Location: USA / Global edge network
Resend Inc.
Purpose: Email delivery (order confirmations, receipts)
Data shared: Email address, order details for email content
Location: USA
Kenya Revenue Authority (KRA)
Purpose: eTIMS invoice compliance (legal requirement)
Data shared: Transaction details for tax invoicing
Location: Kenya
We may also disclose your information if required by Kenyan law, court order, or regulatory authority, or to protect the rights, property, or safety of Batteriq, our customers, or the public.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
7. Your Rights
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your data where we have no legal obligation to retain it.
Right to Object
Object to us processing your data for direct marketing at any time.
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent (e.g., newsletter).
Right to Lodge a Complaint
Complain to the Office of the Data Protection Commissioner (ODPC) Kenya.
Exercise Your Rights
To exercise any of the above rights, contact us at info@batteriq.com or call +254 716 822 014. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.
8. Cookies and Tracking
Batteriq uses minimal tracking technologies:
- SessionStorage (not cookies): We use browser sessionStorage to store a temporary anonymous visitor ID for live analytics. This is automatically deleted when you close your browser tab. No cross-site tracking occurs.
- No advertising cookies: We do not use Google Analytics, Facebook Pixel, or any advertising tracking pixels.
- No persistent cookies for tracking: We do not track you across other websites.
- Essential functionality: Your shopping cart contents are stored in your browser's local memory (Zustand store) for the duration of your session.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse:
- All data is transmitted over HTTPS/TLS encryption.
- Our database (Supabase) uses Row Level Security (RLS) policies to restrict data access.
- Admin access requires a secret URL, email, and bcrypt-hashed password. Admin sessions are HMAC-signed and expire after 8 hours of inactivity.
- API endpoints are protected by rate limiting to prevent abuse and DDoS attacks.
- M-Pesa API credentials are stored as environment variables and never exposed to the public.
- We regularly review and update our security practices.
Despite our best efforts, no method of transmission over the internet is 100% secure. If you suspect any unauthorised access to your data, contact us immediately at info@batteriq.com.
10. Children's Privacy
Batteriq's products and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
11. International Data Transfers
Your data may be transferred to and processed in countries outside Kenya, including the United States and Ireland (European Union), by our service providers (Supabase, Vercel, Resend). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with the Kenya Data Protection Act, 2019, including standard contractual clauses or adequacy decisions where applicable.
12. Links to Third-Party Websites
Our website may contain links to third-party websites including EcoFlow's official website, BLUETTI's website, Safaricom, and our social media profiles. These websites have their own privacy policies, which we encourage you to review. We are not responsible for the content or privacy practices of any third-party websites.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or prominent notice on our website. Your continued use of batteriq.com after any changes constitutes your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Batteriq Solutions Ltd
📍 Kijabe Street Block 17, Nairobi, Kenya
📧 info@batteriq.com
📞 +254 716 822 014
🌐 batteriq.com
You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya if you believe your data protection rights have been violated. Visit odpc.go.ke for more information.