How do I pick up my parcel from a ParcelPoint locker?

Simply use the unique 6-digit code sent to your phone via SMS. Enter the code at the locker touchscreen, make your M-PESA payment, and your compartment will open automatically.

How long can I leave my parcel in the locker?

Parcels can be stored for up to 3 days. You'll receive SMS reminders, and if not collected within 3 days, our team will retrieve the parcel and contact you for alternative arrangements.

Is my parcel secure in the locker?

Absolutely. Our lockers use advanced security features including unique access codes, sturdy construction, and 24/7 monitoring to ensure your parcels are completely safe.

Can I store my own items in a ParcelPoint locker?

Yes! You can use ParcelPoint for personal storage. Simply deposit your items, make an M-PESA payment, and receive your access code to retrieve them later.

Where are ParcelPoint lockers located?

Our lockers are strategically placed in high-traffic locations including malls, residential complexes, office buildings, schools, and community centers across major cities in Kenya.

What payment methods do you accept?

We primarily use M-PESA for payments, which makes transactions quick, secure, and convenient for most Kenyans. Payment is made directly at the locker when collecting your parcel.

ParcelPoint Kenya - Smart Parcel Delivery & Pickup Lockers

This Privacy Policy describes how Squared (“Squared”, “we”, “us”, or “our”), trading as ParcelPoint, collects, uses, and protects personal data in connection with ParcelPoint Ship (our international parcel-forwarding service), ParcelPoint Lockers (our smart-locker rental service), this website, and our related applications (together, the “Service”).

Who we are

Squared is the operator of ParcelPoint in Kenya and the data controller for personal data processed in connection with the Service. You can contact us at hello@squared.co.ke.

Scope

This Policy applies to:

Customers who use ParcelPoint Ship to forward parcels to Kenya.
People who rent a ParcelPoint locker for short-term storage.
Operators of the Service, meaning Squared staff who administer it.

Personal data we collect

When you use ParcelPoint Ship

Phone number, used to sign you in with a one-time SMS code, to send status notifications, and to prompt M-PESA payment.
Your name and the delivery location you choose (a ParcelPoint locker, your address, or a custom address).
Parcel details you provide: the carrier tracking number, a description of the contents, the declared value, and the weight.
Payment records: the M-PESA transaction reference and amount for each parcel.
A device push token, if you enable push notifications, so we can alert you about your shipment.

When you rent a locker

Phone number, used for M-PESA payment and to send you the SMS code that opens the locker.
Locker location, locker size, rental start and end times, and any extension you pay for.
M-PESA transaction reference and amount.

When you hold an operator account

Email address, name, and role.
Authentication artefacts, such as session tokens and, where multi-factor authentication is enabled, TOTP secrets.
Audit-log records of sign-in activity and administrative actions.

For all visitors

IP address, user-agent, and approximate device information, retained for security, abuse prevention, and audit.
Storage strictly necessary to keep you signed in and to remember your theme preference. We do not use third-party advertising cookies.

We do not knowingly collect personal data from children under 18.

Lawful basis for processing

We process personal data on the following bases under the Kenya Data Protection Act, 2019, and, where applicable, the GDPR:

Performance of a contract: to sign you in, forward and clear your parcel, hold or release a locker, and process payments.
Legitimate interests: to secure the Service, prevent abuse, audit administrative actions, and improve reliability.
Legal obligation: to clear parcels through customs and to retain payment and tax records as required by law.
Consent: where applicable, for any communications you opt in to. We do not currently send marketing emails.

How we share personal data

We share personal data only as needed to provide the Service:

Our overseas forwarding warehouses: to match and forward your parcel we share the carrier tracking number, an internal ParcelPoint reference, and the parcel contents. We do not share your name, phone number, or delivery address with the warehouse.
Safaricom (M-PESA): to initiate and complete payments.
Firebase Cloud Messaging (Google): to deliver push notifications about your shipment to your device.
Our SMS gateway: to send one-time sign-in codes and status messages to your phone.
Cloudflare: the locker booking flow uses Cloudflare Turnstile to distinguish people from automated abuse.
Zoho: our email provider, used for account and support correspondence.
Hosting and infrastructure (alwaysdata): hosts this website, the production application, and the database, processing data on our instructions.
Law enforcement and regulators: including customs authorities, when required by valid legal process or to clear your parcel.

We do not sell personal data.

International transfers

Providing ParcelPoint Ship necessarily involves transfers outside Kenya: parcel information is sent to our forwarding warehouses in the origin country (currently the United States, the United Kingdom, Germany, and China), and services such as Firebase Cloud Messaging process data on infrastructure abroad. Some of our hosting is also located outside Kenya. Where personal data is transferred internationally we share the minimum necessary and rely on the safeguards offered by these providers. Contact us if you have questions about a specific transfer.

Retention

Active operator accounts: for as long as the account is active. On deletion or deactivation, identifying fields are removed; certain records (audit logs, payment records) are retained for periods required by law or for legitimate security purposes.
Customer shipment and locker records: retained for the period needed to provide the Service, settle disputes, and meet payment, tax, and customs obligations.

Your rights

Under the Kenya Data Protection Act, 2019 (and the GDPR where it applies to you), you may:

Request a copy of the personal data we hold about you.
Ask us to correct inaccurate data.
Ask us to erase your data, subject to legal exceptions.
Object to or restrict processing in certain cases.
Lodge a complaint with the Office of the Data Protection Commissioner of Kenya, or the supervisory authority in your country of residence.

To exercise any of these rights, email hello@squared.co.ke. We will respond within the timeframe set by applicable law (typically 30 days).

To delete your account, see our account-deletion page.

Security

We use transport-layer encryption for traffic to and from the Service, role-based access controls for administrative actions, multi-factor authentication for administrator accounts, and audit logging of sensitive operations.

Changes to this Policy

We may update this Policy from time to time. The “Last updated” date above indicates when changes were last made.

Contact

Squared, hello@squared.co.ke

Back to ParcelPoint