Privacy Policy

Information Collection and Use

We collect information directly from you and through your use of our Services to enable us to operate effectively and provide our customers with the best possible experience with our products and services.

Types of Data Collected

Use of Data

We use the collected data for various purposes, including:

• To provide and maintain our Services.
• To carry out our obligations under contracts entered into between you and us, or to take steps at your request prior to entering into an agreement with you.
• To meet our regulatory compliance and reporting obligations.
• To respond to your queries, complaints and any other requests that you may have made to us.
• To prevent, detect and investigate fraud, suspected fraud and other crimes.
• To verify your identity in order to protect you and your assets.
• To notify you about changes to our Services.
• To allow you to participate in interactive features of our Services when you choose to do so.
• To provide customer support.
• To gather analysis or valuable information so that we can improve our Services.
• To monitor the usage of our Services.
• To detect, prevent and address technical issues.
• To provide you with news, special offers and general information about other goods, services and events that we offer which are similar to those that you have already purchased or enquired about, unless you have opted not to receive such information.

Retention of Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy or as required to comply with our legal obligations.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or improve the functionality of our Services, or when we are legally obligated to retain it for longer periods.

Transfer of Data

Data generated by users and personal information are stored and processed within Kenya. However, where we need to transfer or process your personal information outside our legal jurisdiction, we undertake to ensure that your personal information is processed or transferred in accordance with the Data Protection Act.

Disclosure of Data

• Business Transactions: If we are involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
• Disclosure for Law Enforcement: Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Security of Data

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised manner, altered or disclosed.

When you have chosen a password that allows you to access certain products or services, you are responsible for keeping the password confidential. We advise you to keep your password secret and not to share it with anyone for any purpose. Our customer service agents will never ask you for your password.

Legal Basis for Processing Personal Data under the General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), the legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

We may process your Personal Data because:

• We need to perform a contract with you.
• You have given us permission to do so.
• The processing is in our legitimate interests and those interests are not overridden by your rights.
• It is necessary for payment processing purposes.
• We need to comply with the law.

Your Data Protection Rights

You have several rights in relation to your Personal Data held by us, including:

• The right to access your Personal Data in our custody.
• The right of rectification. You have the right to request that your information be rectified if it is inaccurate or incomplete.
• The right to object to or restrict the processing of all or part of your Personal Data. We may, however, continue to process your Personal Data where we have a legitimate reason to do so or where required by law.
• The right to request that we correct or delete false or misleading data about you.
• The right to data portability. You have the right to request that you be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format. This will be done at a reasonable cost.

If you would like to contact us in relation to any of the rights set out above, please contact us using the contact details provided below. Please note that, to protect your privacy and security, we may ask you to verify your identity before responding to such requests.

Service Providers

We may employ third-party companies and individuals to facilitate our Services (“Service Providers”), to provide the Services on our behalf, to perform Service-related services or to assist us in analysing how our Services are used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Services.

Payments

We may provide paid products and/or services within our Services. In that case, we use third-party services for payment processing (e.g., payment processors).

We will not store or collect your payment card details. That information is provided directly to our third party payment processors, whose use of your personal information is governed by their respective Privacy Policies.

These payment processors adhere to the standards set by PCI-DSS, as managed by the PCI Security Standards Council, which is a joint effort of brands such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

Links to Other Sites

Our Services may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children's Privacy

Our Services are not directed at anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we will take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Services prior to the change becoming effective, and we will update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.