Privacy policy

When you send an enquiry, we collect the information you enter in the form. Depending on the form version, this may include the fields below. Please only share what is needed for us to understand your enquiry.

• Your name and job title or role.
• Your business name and website address.
• Your work email address and phone number.
• Basic details about your business, such as what you sell and how you plan to connect (API or Hosted Payment Page).
• Anything you write in the message field.

We also keep a record of our correspondence with you, such as emails and call notes, after you get in touch. We do not ask for M-Pesa PINs, passwords or payment details through the enquiry form, and you should never send them.

We keep enquiry data only for as long as it is needed for the purposes above. If an enquiry does not lead to a business relationship, we keep it for [CONFIRM FIRST: retention period] and then delete or anonymise it.

If you go on to become a merchant, data linked to your account is handled under your merchant agreement and our terms. Some records may need to be kept longer where the law requires it.

The Kenya Data Protection Act 2019 gives you rights over your personal data. You can use them by contacting us using the details below.

• To be told how your data is used, which is the purpose of this policy.
• To access the personal data we hold about you.
• To ask us to correct data that is wrong or incomplete.
• To ask us to delete data that is no longer needed or was processed unlawfully.
• To object to processing, including for marketing.
• To withdraw consent at any time, without affecting earlier processing.
• To ask for a copy of your data in a portable format where this applies.

We may need to confirm your identity before acting on a request. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner in Kenya.