Data Protection

Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal information.

Last updated: December 20, 2024

Our Commitment to Your Privacy

At PesaTrace, we understand that your privacy is important. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial services platform.

We are committed to protecting your personal and financial information in accordance with applicable data protection laws and financial regulations, including the Data Protection Act of Kenya and Central Bank of Kenya guidelines.

1. Information We Collect

Personal Information: We collect information you provide directly to us, such as when you create an account, use our services, or contact us. This may include your name, email address, phone number, business information, and financial details.

Transaction Information: We collect information about your transactions, including transaction amounts, dates, merchant information, and payment methods.

Technical Information: We automatically collect certain technical information when you use our services, including your IP address, device information, browser type, and usage patterns.

Location Information: With your consent, we may collect location information to provide location-based services and fraud prevention.

2. How We Use Your Information

Service Provision: We use your information to provide, maintain, and improve our financial services, process transactions, and manage your account.

Communication: We use your contact information to send you service-related communications, updates, and promotional materials (with your consent).

Security and Fraud Prevention: We use your information to detect, prevent, and investigate fraudulent activities and security breaches.

Compliance: We use your information to comply with legal obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.

Analytics and Improvement: We analyze usage patterns to improve our services and develop new features.

3. Information Sharing and Disclosure

Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, and customer support.

Financial Partners: We may share information with banks, mobile money operators, and other financial institutions to facilitate transactions and services.

Legal Requirements: We may disclose your information when required by law, regulation, legal process, or governmental request.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

Consent: We may share your information with your explicit consent for specific purposes not covered in this policy.

4. Data Security

Encryption: We use industry-standard encryption to protect your data both in transit and at rest.

Access Controls: We implement strict access controls and authentication measures to ensure only authorized personnel can access your information.

Security Monitoring: We continuously monitor our systems for security threats and vulnerabilities.

Incident Response: We have procedures in place to respond to security incidents and data breaches promptly.

Compliance: Our security measures comply with applicable financial industry standards, including PCI DSS.

5. Data Retention

Retention Period: We retain your personal information for as long as necessary to provide our services and comply with legal obligations.

Transaction Records: Financial transaction records are retained for the periods required by applicable laws and regulations.

Account Deletion: When you close your account, we will delete or anonymize your personal information, except where retention is required by law.

Backup Systems: Information may remain in our backup systems for a limited time after deletion from our active systems.

6. Your Privacy Rights

Access: You have the right to access the personal information we hold about you.

Correction: You can request correction of inaccurate or incomplete personal information.

Deletion: You may request deletion of your personal information, subject to legal and regulatory requirements.

Portability: You can request a copy of your personal information in a structured, machine-readable format.

Objection: You may object to certain uses of your personal information, particularly for marketing purposes.

Consent Withdrawal: Where we rely on your consent, you can withdraw it at any time.

7. Cookies and Tracking Technologies

Cookies: We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns.

Analytics: We use analytics services to understand how our services are used and to improve performance.

Marketing: With your consent, we may use tracking technologies for personalized marketing and advertising.

Cookie Control: You can control cookie settings through your browser, but some features may not function properly if cookies are disabled.

8. International Data Transfers

Cross-Border Processing: Your information may be processed in countries other than your country of residence.

Safeguards: When we transfer data internationally, we implement appropriate safeguards to protect your information.

Adequacy Decisions: We transfer data to countries with adequate data protection laws or use standard contractual clauses.

Your Consent: By using our services, you consent to the transfer of your information as described in this policy.

9. Children's Privacy

Age Restriction: Our services are not intended for individuals under the age of 18.

No Collection: We do not knowingly collect personal information from children under 18.

Parental Notice: If we become aware that we have collected information from a child under 18, we will delete it promptly.

Verification: We may implement age verification measures to ensure compliance with this policy.

10. Changes to This Privacy Policy

Updates: We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Notification: We will notify you of material changes by email or through our services before they take effect.

Effective Date: Changes will be effective on the date specified in the updated policy.

Continued Use: Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

Contact Us About Privacy
If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer.

Email: privacy@pesatrace.com

Phone: +254 700 000 000

Address: Data Protection Officer, PesaTrace Ltd, Nairobi, Kenya

Response Time: We will respond to privacy inquiries within 30 days