Privacy policy

Last Updated: July 2026

1. Introduction

B-Active Universe Limited ("B-Active", "we", "our", or "us") is committed to protecting your privacy and ensuring that your personal information is handled lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, purchase products, create an account, communicate with us or otherwise use our services (collectively, the "Services").

Our online store is powered by Shopify, which provides the e-commerce platform enabling us to sell our products and services.

This Privacy Policy has been prepared in accordance with:

  • The Kenya Data Protection Act, 2019;

  • The Data Protection (General) Regulations, 2021;

  • Other applicable data protection laws in Kenya.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.


2. Data Controller

The data controller responsible for your personal information is:

Shital 

B Active Universe Limited

Email: contact@b-active.ke


3. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

Identity Information

  • Full name

  • Username

  • Password

  • Account credentials

Contact Information

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

Financial Information

Payments made through our website are securely processed by third-party payment providers.

We do not store your complete payment card details.

Transaction Information

  • Purchase history

  • Order information

  • Returns

  • Refunds

  • Exchanges

Device and Technical Information

  • IP address

  • Browser type

  • Operating system

  • Device identifiers

  • Time zone

  • Cookies

  • Website usage information

Communications

Information you provide when contacting customer support, leaving reviews or communicating with us.

Marketing Preferences

Your communication preferences and consent choices.


4. How We Collect Your Information

We collect personal information:

  • directly from you;

  • automatically through cookies and similar technologies;

  • through Shopify;

  • from payment providers;

  • from delivery partners;

  • from marketing and analytics providers;

  • from publicly available sources where permitted by law.


5. Lawful Basis for Processing

Where the Data Protection Act applies, we process your personal information on one or more of the following lawful bases:

Performance of a Contract

To fulfil your orders, create your account, process payments and provide customer support.

Legitimate Interests

To improve our website, prevent fraud, secure our systems, analyse business performance and communicate with customers.

Legal Obligations

To comply with tax laws, consumer protection laws, anti-fraud obligations and other legal requirements.

Consent

Where required by law, we will rely on your consent before sending marketing communications or placing non-essential cookies.

You may withdraw your consent at any time.

Vital Interests

Where necessary to protect someone's life or safety.


6. How We Use Your Information

We use your personal information to:

  • process and fulfil orders;

  • manage your account;

  • deliver purchased products;

  • provide customer support;

  • communicate regarding your purchases;

  • process returns and refunds;

  • improve our products and services;

  • personalise your shopping experience;

  • conduct analytics;

  • detect fraud;

  • maintain website security;

  • comply with legal obligations;

  • send marketing communications where permitted.


7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve your browsing experience.

Cookies may include:

Essential Cookies

Necessary for the operation of the website, shopping cart and checkout.

Analytics Cookies

Used to understand how visitors use our website and improve performance.

Marketing Cookies

Used to provide relevant advertising and measure advertising effectiveness.

Where required by applicable law, we will obtain your consent before placing non-essential cookies.

You may manage cookie preferences through your browser settings or any cookie management tool available on our website.


8. Shopify

Our online store is hosted by Shopify.

Shopify processes certain personal information on our behalf in order to provide hosting, checkout, payment processing, fraud prevention and other ecommerce services.

Information you provide may be stored by Shopify and processed in accordance with Shopify's own Privacy Policy.

Shopify acts as our service provider and, in certain circumstances, may also act as an independent data controller for specific processing activities.


9. Disclosure of Personal Information

We may disclose your personal information to:

  • Shopify;

  • payment processors;

  • courier and logistics providers;

  • cloud hosting providers;

  • IT support providers;

  • analytics providers;

  • marketing service providers;

  • professional advisers;

  • regulators or law enforcement agencies where required by law;

  • a purchaser of our business in connection with a merger, acquisition or sale of assets.

We do not sell your personal information.


10. International Transfers

Some of our service providers operate outside Kenya.

As a result, your personal information may be transferred to countries outside Kenya, including jurisdictions where Shopify or our other technology providers operate.

Where international transfers occur, we implement appropriate safeguards, including:

  • Standard Contractual Clauses approved by the European Commission where applicable;

  • contractual safeguards required under the Kenya Data Protection Act;

  • transfers to jurisdictions recognised as providing an adequate level of protection; or

  • other lawful transfer mechanisms.


11. Data Retention

We retain personal information only for as long as necessary to:

  • fulfil the purposes for which it was collected;

  • comply with legal obligations;

  • resolve disputes;

  • enforce our agreements;

  • maintain appropriate business records.

When personal information is no longer required, it is securely deleted or anonymised.


12. Security

We maintain appropriate technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.


13. Children's Privacy

Our Services are not directed towards children.

We do not knowingly collect personal information from children unless authorised by a parent or legal guardian or otherwise permitted under applicable law.

If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove the information.


14. Your Rights

Depending on your location and applicable law, you may have the right to:

  • request access to your personal information;

  • request correction of inaccurate information;

  • request deletion of your personal information;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • withdraw consent at any time;

  • request data portability;

  • object to direct marketing;

  • request information regarding international transfers.

We will respond to requests within the timeframes required under applicable law.

We may request proof of identity before processing your request.


15. Marketing Communications

If you have opted in to receive marketing communications, we may send you updates regarding products, promotions and offers.

You may unsubscribe at any time by:

  • clicking the unsubscribe link in our emails; or

  • contacting us at contact@b-active.ke

You will continue to receive transactional communications relating to your purchases.


16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites.

We encourage you to review their privacy policies before providing any personal information.


17. Complaints

If you have concerns regarding how we process your personal information, please contact us first at:

contact@b-active.ke



18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations or technology.

The updated version will be published on this page together with the revised "Last Updated" date.

Your continued use of our Services after any updates constitutes acceptance of the revised Privacy Policy.

 

19. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact:

B-Active Universe Limited

Email: contact@b-active.ke