info@saliroma.com +254 713616594

Privacy Policy

Privacy Policy

Last updated: May 2026

Saliroma Systems is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it — in compliance with Kenya’s Data Protection Act, 2019.

1
Who We Are

Saliroma Systems is the data controller responsible for your personal data. We are based in Nairobi, Kenya and can be contacted at info@saliroma.com. We provide water treatment services and products across Kenya.

2
Data We Collect

We collect information in the following ways:

When you place an order
Name, billing and delivery address, phone number, email address, and payment transaction references. Order history is retained for accounting and legal purposes.

When you contact us
Name, email address, phone number, and the content of your message via our contact form, email, or WhatsApp.

When you create an account
Username, email address, and encrypted password. Account information allows you to track orders and manage your preferences.

Automatically (website usage)
IP address, browser type, pages visited, and time spent on pages — collected via cookies and server logs for site performance and security.

3
How We Use Your Data

We use your personal data for the following purposes:

  • Order fulfilment — processing and delivering your orders, sending order confirmations and receipts.
  • Customer service — responding to enquiries, service requests, and quotes.
  • Service delivery — scheduling field technicians for maintenance, cleaning, or testing engagements.
  • Legal obligations — maintaining records required by Kenyan tax and business law.
  • Website improvement — analysing how the site is used to improve user experience.
  • Marketing (with consent) — sending service updates or promotions only if you have opted in. You may opt out at any time.

4
Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process your data on the following lawful bases:

  • Contract performance — processing is necessary to fulfil orders and deliver services you have requested.
  • Legal obligation — to comply with Kenyan financial and tax regulations.
  • Legitimate interests — for website security, fraud prevention, and service improvement.
  • Consent — for marketing communications, which you may withdraw at any time.

5
Data Sharing

We do not sell or rent your personal data to third parties. We may share your data with:

  • Payment processors — M-Pesa or bank payment gateways process transactions securely. We do not store card or PIN details.
  • Delivery partners — courier services receive your name and delivery address to fulfil orders.
  • IT service providers — hosting and website management providers operate under confidentiality agreements.
  • Legal authorities — where required by Kenyan law, court order, or to protect our legal rights.

6
Cookies

Our website uses cookies — small text files stored on your device — to:

  • Essential cookies — keep your shopping cart and login session active (WooCommerce).
  • Preference cookies — remember your settings and preferences.
  • Analytics cookies — help us understand how visitors use the site so we can improve it.

You can disable non-essential cookies through your browser settings. Disabling essential cookies may affect shopping cart functionality.

7
How Long We Keep Your Data

  • Order records — retained for 7 years to comply with Kenya Revenue Authority requirements.
  • Customer accounts — retained while your account is active. You may request deletion at any time.
  • Contact enquiries — retained for up to 2 years for service follow-up, then deleted.
  • Marketing data — retained until you unsubscribe or withdraw consent.

8
Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

Access

Request a copy of the personal data we hold about you.

Correction

Request correction of inaccurate or incomplete data.

Erasure

Request deletion of your data where it is no longer needed.

Objection

Object to processing of your data for marketing purposes.

Portability

Receive your data in a portable, machine-readable format.

Withdraw Consent

Withdraw marketing consent at any time without penalty.

To exercise any of these rights, email us at info@saliroma.com. We will respond within 30 days.

9
Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Payment transactions are handled by certified payment processors and we do not store payment card details on our servers.

10
Changes to This Policy

We may update this Privacy Policy from time to time. The current version with the date of last update is always available on this page. We encourage you to review this page periodically.

Privacy Questions or Concerns?

Contact our team and we will respond within 30 days.