Privacy Policy

This Privacy Policy explains how Shabaya Limited (“we”, “us”, “our”) collects, uses, and protects personal information you provide when you visit shabaya.coffee, sign up for the newsletter, place an order, apply to the Academy, or engage us for services.

Who we are

Shabaya Limited is a Kenyan-registered coffee company headquartered in Nairobi, Kenya. You can reach us at shabaya@shabaya.coffee or +254 736 044 664.

What we collect

• Contact information you give us: name, email, phone, company, city.
• Order information: items ordered, delivery address, order value. We do not store card details; payment is handled by our processors.
• Newsletter subscription: email address and signup source.
• Usage data if you accept analytics cookies: pages visited, referrer, device type, approximate location.

How we use it

• To fulfil orders, ship coffee, and answer support requests.
• To reply to enquiries and design bespoke engagements.
• To send the monthly Journal newsletter you opted into.
• To improve the site, our shop, and our services.
• To meet our legal and accounting obligations.

Legal basis (for EEA/UK visitors)

We process personal data on the basis of (i) your consent (marketing emails, analytics cookies), (ii) contract (fulfilling an order or service you asked for), (iii) legitimate interest (running and improving our business), and (iv) legal obligation (tax and accounting).

Sharing

We share data only with the service providers we need to run the business: our email provider (for the newsletter), our payment processors (for orders), our shipping partners (for delivery), our analytics tools (only if you accept), and our accountants and auditors. We do not sell personal data.

How long we keep it

We keep order records for seven years for tax and accounting. Newsletter subscribers are kept until you unsubscribe. General enquiries are kept for two years unless the relationship becomes an active engagement.

Your rights

You can ask us to (i) see what personal data we hold about you, (ii) correct anything wrong, (iii) delete your data, or (iv) unsubscribe from any marketing at any time. Email shabaya@shabaya.coffee with the subject “Privacy request” and we will act within 30 days.

Cookies

We use a small number of cookies. See our Cookie Policy for the full list and how to opt out.

Changes to this policy

If we materially change this policy, we will note the update at the top of the page and, where required, ask for your consent again.