Privacy Policy
A bookshop learns things about people. What they read, what they give away, which evening they keep free for a book club. We think that knowledge deserves care, so here is what we keep, why we keep it, and what we do with it.
Who we are
The Bookworm is run by Kalamu Ink Ltd, Gigiri Courtyard, Gigiri Lane, Nairobi. For anything on this page, write to bookwormgigiri@gmail.com.
What we collect, and why
When you order, we need your name, email address and phone number, and an address if we are sending something to you. Without them the book does not arrive.
When you join the library, we keep a record of what you have borrowed and when it is due back. That record exists so the books come home. We do not study it, and it does not leave the shop.
When you sign up for an event, we keep your name and contact details so we can tell you if anything changes.
When you subscribe to our newsletter, we keep your email address until you unsubscribe. Every newsletter has a link for that.
When you write to us through the contact form, we keep the message so we can answer it.
Payments
Card payments are handled by DPO Pay. M-Pesa payments go directly to our Pay Bill. We never see or store your full card number.
Visits to this website
We count visits with Plausible, which uses no cookies and does not identify you. We also use Google Analytics, which does set cookies. It only runs if you accept them in the bar at the bottom of the page. If you decline, nothing about the site changes.
Who else sees your details
Only those who need them to finish what you asked for. If we arrange a delivery, the rider (Uber or Glovo) receives your name, phone number and address. Parcels outside Nairobi go through Wells Fargo or G4S. Our website and records are hosted by Odoo. Invoices are reported to the Kenya Revenue Authority as the law requires. We do not sell your details, and we do not pass them to anyone for advertising.
How long we keep things
Order and payment records are kept for as long as Kenyan tax law requires. Everything else is kept only while it serves a purpose: an active membership, an upcoming event, a subscription you have not cancelled.
Your rights
Under Kenya's Data Protection Act, 2019, you may ask to see what we hold about you, have it corrected, or have it deleted where we are not required to keep it. Write to us and we will answer within a reasonable time. If you feel we have handled your information badly, you may complain to the Office of the Data Protection Commissioner.
Last updated 28 September 2026.