This website is operated by Ecosafe Network Limited, a company registered in Kenya, trading as Mamstar.

Who we are

This website is operated by Ecosafe Network Limited, trading as Mamstar ("we", "us", "our"). We are the data controller for personal data collected through this website. Our contact details are at the end of this policy.

What we collect

When you place an order or send us an enquiry, we collect:

• Your name, and your company name where you give it
• Your phone number, and your email address where you give it
• Your delivery address, where you choose delivery
• Your delivery location, where you choose to share it
• Details of what you ordered and what you paid
• For bulk orders, your tanker registration and capacity
• Your M-Pesa transaction reference and the number the payment came from

We do not collect or store your M-Pesa PIN, and we never see it. Payment is authorised on your own handset through Safaricom.

Why we use it

• To process, prepare and deliver your order
• To contact you about your order
• To take payment and to reconcile it against our records
• To keep accounting and tax records as required by Kenyan law
• To respond to enquiries you send us

Our lawful basis

We process your data to perform our contract with you when you place an order, to comply with our legal obligations for tax and accounting records, and on the basis of our legitimate interest in operating and improving the business.

Who we share it with

• Safaricom PLC — to process M-Pesa payments
• Our delivery staff — your name, phone number and address, so that your order can be delivered
• Our hosting and technology providers — who store and process data on our behalf
• Professional advisers — where required for accounting or legal purposes

We do not sell your personal data to anyone.

How long we keep it

We keep your personal data for as long as is necessary for the purposes set out above, and for as long as we are required to retain it under Kenyan tax and accounting law. Enquiries that do not result in an order are kept only for as long as they remain useful to us in responding to you.

Where your data is stored

This website and its database are hosted on servers located in Frankfurt, Germany. This means your personal data is transferred outside Kenya and stored in the European Union.

We rely on our hosting provider's contractual and technical safeguards to protect data held on those servers, including encryption in transit, access control, and the data protection standards applicable in the European Union. By placing an order through this website you consent to that transfer.

Your rights

Under the Data Protection Act 2019 you have the right to be informed about how your data is used, to access the personal data we hold about you, to have inaccurate data corrected, to request erasure where we have no continuing lawful reason to keep it, to object to processing, and to lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these rights, contact us using the details below. We will respond within the period required by law.

Security

This website uses HTTPS encryption for all traffic. Access to order and customer data is restricted to authorised staff. Payment credentials are held in server configuration and are never stored in our source code. No system can be guaranteed completely secure, but we take reasonable technical and organisational measures to protect the data we hold.

Cookies

We use a session cookie to remember the contents of your cart and which orders your browser is permitted to view. This cookie is necessary for the website to function and is removed when you close your browser. We do not use cookies to track you across other websites.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

Contact

Ecosafe Network Limited, trading as Mamstar
Mamstar Kandisi
info@example.com
+254743811181

Questions about this policy? Contact us.