Last updated: February 2026
Operated by iLife Solutions LTD — Kimathi House, Suite 304, Moi Avenue, Nairobi, Kenya
Who We Are
NexaTech is an electronics retail and device repair business operated by iLife Solutions LTD, a company registered in Kenya. Our website is available at https://nexatech.co.ke and serves customers across Nairobi and Kenya at large.
We offer online shopping for phones, laptops, and accessories, as well as professional device repair services bookable through our platform. In the course of providing these services, we collect and process certain personal data about you. This Privacy Policy explains what we collect, why we collect it, how we use it, and what rights you have over your information.
We are committed to handling your personal data responsibly, transparently, and in accordance with applicable Kenyan data protection law, including the Data Protection Act, 2019.
If you have any questions about this policy or how your data is handled, you can contact us at any time using the details at the bottom of this page.
What Data We Collect and Why
1. Account and purchase data
When you create an account, place an order, or book a repair through NexaTech, we collect personal information necessary to fulfil your request. This includes your name, email address, phone number, delivery address, and payment details. We use this information to:
- Process and fulfil your orders and repair bookings
- Send you order confirmations, repair status updates, and delivery notifications
- Maintain a record of your transaction history for customer service purposes
- Comply with financial record-keeping obligations
Payment transactions are processed securely through our payment partners. NexaTech does not store your full card details or M-Pesa PIN on our servers.
2. Comments and reviews
When you leave a comment or review on our website, we collect the information you submit in the comment form — typically your name, email address, and the content of your comment. We also collect your IP address and browser user agent string to assist with spam detection and to protect the integrity of our platform.
An anonymised string derived from your email address (a hash) may be sent to the Gravatar service to check whether you have a profile picture associated with your email. If you do, your Gravatar image will be displayed publicly alongside your comment once it has been approved. Gravatar is operated by Automattic, and their privacy policy is available at https://automattic.com/privacy/.
Approved comments and their associated metadata are retained indefinitely. This allows us to recognise and approve follow-up comments from the same user automatically, rather than holding every comment in a moderation queue.
3. Contact form submissions
When you submit a message through our contact form or repair booking form, we collect the information you provide — including your name, email address, phone number, and the content of your message. This information is used solely to respond to your enquiry and is not used for marketing purposes without your separate consent.
4. Website usage data
Like most websites, we collect certain technical data automatically when you visit nexatech.co.ke. This may include your IP address, browser type and version, operating system, referring URL, pages visited, and the time and date of your visit. This data is collected through cookies and analytics tools and is used to understand how visitors use our website so that we can improve it.
Cookies
Cookies are small text files placed on your device when you visit a website. NexaTech uses cookies for the following purposes:
Comment cookies — If you leave a comment on our site, you may opt in to saving your name, email address, and website URL in cookies. This is for your convenience so that you do not need to re-enter your details the next time you comment. These cookies last for one year.
Session cookies — When you visit our login page, a temporary cookie is set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
Login cookies — When you log in to your NexaTech account, we set cookies to save your login session and display preferences. Login cookies last for two days, and display preference cookies last for one year. If you select “Remember Me” at login, your session will persist for two weeks. When you log out, all login cookies are removed from your browser.
Editor cookies — If you publish or edit content on our website, a cookie is saved to your browser containing the post ID of the content you edited. This cookie contains no personal data and expires after one day.
Analytics cookies — We may use third-party analytics tools such as Google Analytics to understand visitor behaviour on our site. These tools use cookies to collect anonymised, aggregated data about how users interact with our website. No personally identifiable information is passed to these services.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the NexaTech website, including your ability to log in or complete a purchase.
Media and Uploaded Images
If you upload images to the NexaTech website — for example, as part of a repair request or a product review — please be aware that uploaded images may contain embedded metadata, including EXIF GPS location data. This location data can be extracted by other visitors who download the image. We recommend removing any location data from images before uploading them. NexaTech does not automatically strip EXIF data from uploaded images.
Embedded Content from Other Websites
Pages on the NexaTech website may include embedded content from third-party platforms, such as videos, maps, or social media posts. Embedded content from other websites behaves in exactly the same way as if you had visited those websites directly.
These third-party websites may collect data about you, use their own cookies, embed additional tracking technologies, and monitor your interaction with their embedded content. If you are logged in to a third-party platform when you encounter embedded content from that platform on our site, they may track your interaction with that content. NexaTech is not responsible for the data practices of third-party websites. We encourage you to review the privacy policies of any third-party services whose content appears on our site.
Who We Share Your Data With
NexaTech does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data in the following limited circumstances:
Service providers — We work with trusted third-party service providers who assist us in operating our website and delivering our services. These include payment processors, delivery and logistics partners, and email service providers. These parties are only given access to the personal data necessary to perform their specific function and are contractually required to handle it securely.
Spam detection — Visitor comments submitted on our website may be checked through an automated spam detection service to protect the integrity of our platform.
Password resets — If you request a password reset, your IP address will be included in the reset email as part of the security verification process.
Legal obligations — We may disclose your personal data where required to do so by law, or in response to a valid request from a government authority, regulatory body, or court of competent jurisdiction.
Business transfers — In the event that NexaTech or iLife Solutions LTD undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a change occurs.
How Long We Retain Your Data
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.
- Order and transaction records are retained for a minimum of seven years in accordance with Kenyan tax and financial record-keeping requirements.
- Repair booking records are retained for three years following the completion of a repair.
- Comments and their metadata are retained indefinitely to support comment moderation and continuity of conversations on our platform.
- Registered user profiles are retained for as long as your account remains active. If you request account deletion, your personal data will be removed from our systems within 30 days, except where we are legally required to retain certain records.
- Contact form submissions are retained for up to 12 months and then securely deleted unless an ongoing matter requires their retention.
Your Rights Over Your Data
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:
Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this in a commonly used electronic format within 21 days of a verified request.
Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Registered users can update most of their personal information directly through their account profile.
Right to erasure: You have the right to request that we delete your personal data. We will comply with such requests where there is no legal or legitimate business reason to retain the data. Please note that we cannot delete data we are legally obliged to retain, such as financial transaction records.
Right to data portability: If you have an account on our site or have submitted data through our forms, you can request an exported file of all personal data we hold about you in a structured, machine-readable format.
Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. If you no longer wish to receive marketing communications from NexaTech, you can unsubscribe at any time using the link in any marketing email or by contacting us directly.
Right to withdraw consent: Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us using the details below. We may ask you to verify your identity before processing your request.
Data Security
NexaTech takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include secure HTTPS encryption on our website, restricted access to personal data on a need-to-know basis, and regular review of our data handling practices.
While we take every reasonable precaution, no method of data transmission or storage is completely secure. In the unlikely event of a data breach that affects your personal data, we will notify you and the relevant authorities as required by law.
Where Your Data Is Sent
NexaTech is based in Kenya and your data is primarily processed and stored within Kenya. In some cases, data may be transmitted to or processed by third-party service providers based outside Kenya — for example, cloud hosting providers or email platforms. Where this occurs, we take steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards.
Visitor comments submitted on our website may be routed through an automated spam detection service, which may involve transmission of comment data to servers outside Kenya.
Children’s Privacy
NexaTech’s services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe that a child has provided us with personal information without parental consent, please contact us and we will take steps to delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or via a notice on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
Your continued use of the NexaTech website and services after any changes to this policy constitutes your acceptance of the updated terms.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way NexaTech handles your personal data, please contact us through any of the following:
- Email: privacy@nexatech.co.ke
- Phone: 0701 462 161
- Contact form: nexatech.co.ke/contact
- Post: iLife Solutions LTD, Kimathi House, Suite 304, Moi Avenue, Nairobi, Kenya
We aim to respond to all privacy-related enquiries within 5 business days.