Privacy Policy
Last updated: 1 September 2026 · Kaziiko Digital Services Ltd.
Your privacy matters to us. This policy explains what personal information we collect, how we use it, and the choices you have. We comply with the Kenyan Data Protection Act, 2019.
1. Who we are
Kaziiko is operated by Kaziiko Digital Services Ltd., registered in Kenya. We are the data controller for personal information collected through our platform. Contact: privacy@kaziiko.com.
2. Information we collect
We collect: (a) Account data — name, email address, phone number, and password when you register; (b) Identity data — national ID number or passport number for expert verification; (c) Order data — details of services requested, requirements, and communications between clients and experts; (d) Payment data — M-Pesa transaction references (we do not store your M-Pesa PIN or full phone number beyond what is necessary for escrow processing); (e) Usage data — pages visited, features used, device type, browser, and IP address collected automatically via cookies and server logs.
3. How we use your information
We use your data to: (a) create and manage your account; (b) process orders and facilitate escrow payments; (c) verify expert identities and credentials; (d) communicate with you about your orders and account; (e) resolve disputes and investigate fraud; (f) improve the Platform through aggregate analytics; (g) comply with Kenyan law, including anti-money laundering obligations.
4. Sharing your information
We share your personal data only where necessary: (a) With your matched expert — they receive your name, order requirements, and documents you supply for the service; (b) With M-Pesa / Safaricom — for payment processing; (c) With our cloud infrastructure provider (Supabase) — data is stored and processed on secured, SOC 2-compliant servers; (d) With law enforcement or regulators — when required by Kenyan law or a valid court order. We do not sell your personal data.
5. Your documents and ID data
Any documents you share with an expert (such as national ID scans, KRA PIN certificates, or NTSA records) are transmitted securely and accessible only to the assigned expert. Experts are contractually prohibited from storing, sharing, or misusing your documents. After order completion, documents are retained for 90 days for dispute purposes, then deleted.
6. Data retention
We retain account data for as long as your account is active. After account deletion, we may retain certain records for up to 7 years where required by Kenyan tax and financial regulations. Transaction records are retained for 7 years. Inactive accounts with no orders are deleted after 2 years.
7. Cookies
We use strictly necessary cookies to keep you logged in and to prevent cross-site request forgery. We use analytics cookies (opt-in) to understand how the Platform is used — aggregated data only. You can opt out of analytics cookies at any time via your browser settings.
8. Security
We use industry-standard security measures including HTTPS encryption in transit, AES-256 encryption at rest, and row-level security on our database. Access to production systems is restricted to authorised personnel only. We perform regular security audits.
9. Your rights
Under Kenyan data protection law (Data Protection Act, 2019), you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate data; (c) request deletion of your data (subject to retention obligations); (d) object to processing for direct marketing; (e) data portability. To exercise these rights, email privacy@kaziiko.com.
10. Children
Kaziiko is not directed at children under 18. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will delete it.
11. Changes to this policy
We may update this Privacy Policy. When we do, we will update the "Last updated" date and, for material changes, notify registered users by email at least 14 days before the change takes effect.
12. Contact
For privacy enquiries or to exercise your rights, contact our Data Protection Officer at privacy@kaziiko.com. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.