Privacy Policy

This Privacy Policy explains how BuyKenya Business Solutions (“BuyKenya”, “Platform”, “Service”) collects, uses, and protects your personal information in compliance with the Kenya Data Protection Act (DPA) of 2019.

1. Data Collection

• We collect personal data you provide during registration, listing creation, payments, and communication with our platform.
• We may also collect technical information such as IP addresses, browser type, and usage statistics to improve our services.

2. Lawful Basis for Processing

• All personal data is processed lawfully, fairly, and transparently in line with the DPA.
• We only collect data necessary for providing our services, fulfilling contractual obligations, and complying with legal requirements.

3. Data Usage

• Personal data is used to manage accounts, process transactions, provide customer support, and improve platform functionality.
• We do not sell or share personal data with unauthorized third parties.

4. Data Subject Rights

In accordance with the DPA, you have the following rights:

• Right to Access – Request a copy of your personal data held by us.
• Right to Rectification – Correct inaccurate or incomplete data.
• Right to Erasure – Request deletion of your personal data where applicable.
• Right to Restrict Processing – Limit how we use your data in certain circumstances.
• Right to Data Portability – Receive your data in a structured, commonly used format.
• Right to Object – Object to processing of your data for direct marketing or other purposes.

5. Data Security

• We implement technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
• Data is encrypted during transmission and stored securely on trusted servers.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

7. Cross-Border Data Transfers

If personal data is transferred outside Kenya, we ensure adequate safeguards are in place in line with the DPA requirements.

8. Contact & Complaints

If you have questions or wish to exercise your rights under the DPA, contact us at info@buykenya.org or call +254 754 252 520 / +254 757 234146. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

Last updated: May 2, 2026