Your cart is empty
You may check out all the available products and buy some in the shop
Return to shopPrivacy Policy
Tulia Lamps Privacy Policy
1. Introduction
Welcome to Tulia Lamps (“Tulia”, “we”, “our”, or “us”). We are a Kenyan home décor brand specialising in designer table lamps combining 3D-printed shades and locally crafted wooden bases, based in Nairobi, Kenya.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place an order, contact us, or otherwise interact with our brand. Please read this policy carefully. By using our services, you acknowledge that you have read and understood the practices described herein.
If you do not agree with this Privacy Policy, please discontinue use of our services immediately.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you:
• Place an order or make a purchase (name, delivery address, phone number, email address)
• Create an account or register on our website
• Contact us via email, social media, or inquiry forms
• Subscribe to our newsletter or marketing communications
• Participate in surveys, promotions, or competitions
• Request customisation or submit design preferences
2.2 Information Collected Automatically
When you access our website or digital platforms, we may automatically collect certain technical information, including:
• Device type, operating system, and browser information
• IP address and approximate geographic location
• Pages visited, time spent, and links clicked
• Referring URLs and search terms used to find our website
• Cookies and similar tracking technologies (see Section 8)
2.3 Information from Third Parties
We may receive information about you from third-party sources such as social media platforms (e.g. Instagram, Facebook), payment processors, and logistics partners (e.g. ShipShap), strictly to the extent necessary to process your order or improve your experience.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
• Processing and fulfilling your orders, including delivery coordination
• Sending order confirmations, shipping updates, and customer service communications
• Responding to your enquiries, feedback, and support requests
• Sending marketing communications where you have opted in (you may opt out at any time)
• Improving our website, products, and overall customer experience
• Conducting internal analytics, inventory planning, and business reporting
• Complying with legal obligations, including KRA VAT requirements and applicable Kenyan law
• Preventing fraud, unauthorised access, and other harmful activities
• Customising your experience and personalising product recommendations
We will not use your information for any purpose that is incompatible with the purposes described above without providing you with prior notice and, where required, obtaining your consent.
4. Legal Basis for Processing
Tulia processes personal information on the following legal grounds:
• Contract performance: Processing is necessary to fulfil orders and deliver services you have requested.
• Legitimate interests: We process data to improve our products, prevent fraud, and conduct business analytics, where such interests are not overridden by your rights.
• Legal obligation: We process data as required by Kenyan law, including the Kenya Revenue Authority (KRA) VAT regulations and any applicable data protection legislation.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent, which you may withdraw at any time.
5. Sharing of Your Information
5.1 Service Providers
We may share your information with trusted third-party service providers who assist us in operating our business, including:
• Delivery and logistics partners (e.g. ShipShap) to fulfil your orders
• Payment processing providers to handle transactions securely
• Email and marketing platforms to send communications you have consented to
• Website hosting and technology infrastructure providers
All service providers are contractually required to process your data only on our behalf, in accordance with this Privacy Policy, and to implement appropriate security measures.
5.2 Legal and Regulatory Disclosure
We may disclose your information where required by law or in response to a valid legal process, including requests from the Kenya Revenue Authority (KRA), courts, or other competent regulatory or government authorities.
5.3 Business Transfers
In the event of a merger, acquisition, business restructuring, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email or prominent website notice before your information is transferred and becomes subject to a different privacy policy.
5.4 No Sale of Personal Data
Tulia does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Full stop.
6. Data Retention
We retain your personal information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
• Order and transaction records are retained for a minimum of seven (7) years in compliance with Kenyan tax and accounting laws.
• Customer account data is retained for the duration of your account’s activity and for a reasonable period thereafter.
• Marketing consent records are retained until you withdraw consent, plus a reasonable period for compliance purposes.
• Technical logs and analytics data are retained for up to twenty-four (24) months.
When data is no longer needed, we securely delete or anonymise it in a manner that prevents reconstruction or identification.
7. Data Security
We take the security of your personal information seriously and implement commercially reasonable technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:
• Secure HTTPS encryption for all data transmitted through our website
• Access controls limiting data to authorised personnel only
• Regular review of our data collection, storage, and processing practices
• Use of reputable, security-vetted third-party platforms for payment processing and communications
However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You provide your information at your own risk and are encouraged to take appropriate precautions, including using strong passwords and keeping your account credentials confidential.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
8. Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies (such as pixels and local storage) to enhance functionality and understand how visitors use our site.
• Essential cookies: Required for the website to function correctly (e.g. shopping cart, session management). These cannot be disabled without affecting site functionality.
• Analytics cookies: Help us understand visitor behaviour in aggregate, allowing us to improve our website and products (e.g. Google Analytics).
• Marketing cookies: Used to deliver relevant advertising and track campaign effectiveness (e.g. Meta Pixel for Instagram and Facebook ads).
You can manage or disable non-essential cookies via your browser settings or our cookie preference centre. Note that disabling certain cookies may affect your experience on our website.
9. Your Rights
Subject to applicable Kenyan law and the Data Protection Act (2019), you have the following rights regarding your personal information:
• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the details in Section 12. We will respond to all legitimate requests within thirty (30) days. We may need to verify your identity before processing your request.
10. Children’s Privacy
Our products and services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such information promptly.
11. Third-Party Links and Platforms
Our website and social media communications may contain links to third-party websites, platforms, or services (such as Instagram, Facebook, or payment gateways). This Privacy Policy applies solely to Tulia’s own data practices. We are not responsible for the privacy practices of any third-party sites and encourage you to review their respective privacy policies before providing any personal information.
12. Limitation of Liability
To the fullest extent permitted by Kenyan law, Tulia shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from or related to your use of our services, including any unauthorised access to or alteration of your data by third parties, provided that we have implemented reasonable security measures as described in Section 7.
Our total liability for any claims related to the collection or processing of your personal data shall not exceed the total amount paid by you for our products or services in the twelve (12) months preceding the relevant claim.
Nothing in this section shall limit our liability for gross negligence, wilful misconduct, or any liability that cannot be excluded under applicable law.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. When we make material changes, we will revise the effective date at the top of this document and, where appropriate, notify you via email or a prominent notice on our website.
Your continued use of our services after any changes to this Privacy Policy constitutes your acknowledgement of those changes. We encourage you to review this Policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:
Tulia Lamps
Email: orders@tulia.africa
Location: Nairobi, Kenya
We take all privacy concerns seriously and will endeavour to respond to your enquiry within five (5) business days.
This Privacy Policy was prepared for Tulia Lamps and is governed by the laws of the Republic of Kenya.
Tulia Lamps · Nairobi, Kenya · orders@tulialamps.africa