We take the privacy of our online platform and mobile application users very seriously. We ask that you read this privacy policy (“Policy”), carefully as it contains important information about how we will use your personal data. For the Purposes of the Data Protection Act, No. 24 of 2019, Jireh Innovations Limited, a limited liability company incorporated in Kenya with Company number PVT-Y2U985XX of PO Box 76547-00508, Nairobi, Kenya is the data controller and processor and is responsible for your personal data.
Our full details are:
We will collect the following information from you:
We will store and process your personal data in our servers in Kenya or in other countries where our cloud storage infrastructure is domiciled. Our cloud storage infrastructure is DigitalOcean and is located in Bangalore, India. DigitalOcean maintains a high level of data security and protection and we will continue to ensure that DigitalOcean maintains its promise of maintaining high security and technical measures and safeguards that guarantee the safety of your Information.
Whenever we share your information with our third party partners, we will ensure that such partners have demonstrated that they store Information in countries or servers with adequate level of security and protection for your personal data and in accordance with the same principles under the Data Protection Act.
By submitting your Information, you agree to the collection, transfer, storing or processing of your Information in the manner set in this Policy. We will take all steps reasonably necessary to ensure that your personal data is treated, stored and processed securely and in accordance with this Policy.
We will use your personal data in the following circumstances:
We adhere to the principles relating to processing of personal data as set out in the Data Protection Act and its regulations and therefore will not process your personal data unless you give us consent to do so.
We acknowledge that any information you provide to us should be given voluntarily. Given the nature of our service, we will not be able to provide the Services if you do not provide the information requested or authorize us to obtain the same from third parties because we rely on the information to transact the Services.
We may disclose your personal data to:
If you have given permission, we may contact you by email, telephone or SMS, about our services, promotions or offers that may be of interest to you. If you prefer not to receive any direct marketing communications from us, you can opt out at any time.
We will use technical and organisational measures to safeguard your personal data, for example:
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet.
We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of quality assurance.
We may transfer your personal data outside Kenya to our secure cloud servers in Bangalore, India. Our cloud infrastructure provider maintains the highest level of security compliance in respect of data protection and maintains the following certifications for compliance with ISO/IEC 27001:2013, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and SOC 2 Type II. By providing your consent to this policy, you also authorise us to transfer your personal data provided to us out of Kenya and you explicitly consent to the transfer of your personal data to the foreign recipients mentioned above. We assure you that such proper safeguards have been put in place to address the security and protection of your Information in accordance with the provisions of the Data Protection Act or other similar regulations in the relevant jurisdictions.
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include:
If you wish to exercise any of the rights set out above, please send us a written request through [email protected] and we will respond to you within 48 hours.
We may change this Policy from time to time and we will notify you when we do. Regardless, you should check this policy frequently to ensure you are aware of the most recent version that will apply each time you use the Service.
If you have any concern about privacy or want to contact one of our data controllers, please contact us through the address set out above, with a thorough description and we will try to resolve the issue for you. Further, the data protection officer for the above mentioned data controllers can be contacted at [email protected]
Last Updated: 7 December 2024.