Privacy Policy

Effective Date: 11 – December – 2024
Last Updated: 19 – February – 2025

1. Introduction

Welcome to Kupya. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website, mobile application, and services (collectively, the “Services”).

Kupya operates in compliance with the Data Protection Act, 2019 of Kenya and other applicable privacy laws. By accessing or using our Services, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Kupya (referred to as “we,” “us,” or “our”) is the data controller responsible for your personal data.

• Location: Nairobi, Kenya
• Email: hello@kupya.shop

3. The Data We Collect

We collect different types of data to provide and improve our Service for you.

A. Information You Provide to Us

• Identity Data: Name, username, or similar identifier.
• Contact Data: Email address, telephone number, and physical address (if applicable).
• Financial Data: If you make payments or receive payouts (as a Creator), we may collect payment card details or mobile money (M-Pesa) numbers. Note: We do not store full credit card numbers; these are processed by our secure payment gateway partners.
• Profile Data: Your interests, preferences, feedback, and survey responses.

B. Information We Collect Automatically

• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you use our website and services (e.g., pages visited, time spent on pages).

4. How We Use Your Data

We only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

1. To Provide the Service: To register you as a new user, process your orders, or facilitate creator-business matches.
2. To Process Payments: To manage payments, fees, and charges (including M-Pesa transactions).
3. To Communicate with You: To send you service updates, security alerts, and support messages.
4. For Marketing: To send you newsletters or promotional offers (only if you have opted in). You can unsubscribe at any time.
5. For Improvement: To use data analytics to improve our website, products/services, marketing, and user experience.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Service Providers: Third parties who provide IT, system administration, and payment processing services (e.g., Pesapal, Stripe, AWS).
• Business Partners: If you are a Creator, we share necessary profile information with prospective Business Clients to facilitate work.
• Legal Obligations: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

6. International Transfers

Your information, including Personal Data, may be transferred to—and maintained on—computers located outside of Kenya (e.g., cloud servers). We ensure that any such transfer is compliant with the Data Protection Act and that adequate safeguards are in place to protect your data.

7. Your Rights

Under the Data Protection Act, 2019, you have specific rights regarding your personal data:

• Right to be Informed: To know exactly how your data is being used.
• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request correction of false or misleading data.
• Right to Erasure: To ask us to delete or remove personal data where there is no good reason for us to continue processing it.
• Right to Object: To object to the processing of your personal data for direct marketing.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to those employees, agents, and contractors who have a business need to know.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: hello@kupya.shop