Privacy

1. Who is responsible for your details

Nuella Learning Supplies Limited, which trades as Nuella Pen and Play Store and runs BookLists Hub, decides how your details are used. Our postal address is P.O. Box 344-00605, Uthiru, Nairobi. To ask anything about this page, write to us at the email address on the Contact page.

2. What we keep, and why

Your account

Your email address or your phone number, and your name once you give it. We use them to sign you in, to write to you about your account and to know who an order is for. If you sign in with Google, where that is offered, Google tells us your name, your email address and the number that identifies your Google account. Nothing else.

Sign-in codes

You have no password with us. Each time you sign in we send a six-digit code to your email address. A code works once and for ten minutes. When you change your email address we send a code to the new one and tell the old one that it was changed.

Your Learners

For each child you add: their name, their school, their Grade and, if you give it, their stream. We use these only to show you the right Booklist and to prepare, cover, label and deliver their books and supplies. We never use them for advertising. By adding a Learner you confirm that you are their parent or guardian. You can remove a Learner at any time.

Your delivery addresses

The name you give the address, the town or estate, your directions and, if someone else receives the delivery, their name and phone number. We use them to bring your order to you.

Your Wishlist

The products you keep with the heart, so you can find them again.

The newsletter

If you sign up for our newsletter we keep your email address, the page you signed up on and the date. That is all: no name and no link to an account. We write only about school lists and offers. Every email carries a link to unsubscribe. When you unsubscribe we keep only the note that you asked us to stop.

Messages you send us

When you chat with us on WhatsApp or write to us by email, we keep the conversation to answer you. WhatsApp is run by Meta under its own terms.

What your browser sends

Like every website, ours receives your internet address and the kind of browser you use when you open a page, and our server keeps a log of these for a short time to keep the site safe and working.

3. Cookies

We use the few cookies the site cannot work without: one keeps you signed in as you move from page to page and one protects the forms you send us. We do not use advertising cookies. If we add tools that measure how the site is used, this page will say so first.

4. Payments

Ordering on this site opens soon. When it does, payments will be handled by Safaricom for M-Pesa and by a card payment provider. We will keep the record that a payment was made and its reference. We will not see or keep your M-Pesa PIN or your card number.

5. Who sees your details

• Our staff, to prepare your order and to help you when you ask.
• The Rider who delivers your order, who is given the delivery address and the name and phone number of whoever receives it.
• The companies that work for us to host and maintain this website and to send our emails. They act on our instructions, and some of them keep data on servers outside Kenya.
• The authorities, where the law requires it.

We do not sell or rent your details, and we do not give them to advertisers.

6. How long we keep them

We keep your account for as long as you have it. When you choose "Delete my account" we erase your details, your Learners, your delivery addresses, your Wishlist and your address on the newsletter list at once and for good. Once ordering is open, the record of an order has to be kept for as long as the law on business records requires.

7. Your rights

Under the Data Protection Act, 2019 you may ask us what we hold about you, have a mistake corrected, have your details erased, object to how we use them and withdraw a consent you gave. Most of this you can do yourself:

• see and correct your details, your Learners and your addresses in your account;
• erase everything with "Delete my account" on your profile;
• stop the newsletter with the link in any of its emails.

For anything else, write to us. If you are not satisfied with our answer you may complain to the Office of the Data Protection Commissioner.

8. Children

This website is for parents and guardians. Children do not have accounts, and we hold a child's details only because their parent or guardian gave them to us.

9. Changes to this page

When what we do with your details changes, this page changes first. If the change is an important one we will tell you by email as well.