Kubamba ("we", "our", or "us") is committed to safeguarding the privacy of individuals and organizations across Kenya, Africa, and globally. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in compliance with Kenya’s Data Protection Act (DPA), the European Union’s General Data Protection Regulation (GDPR), and applicable U.S. privacy laws including the California Consumer Privacy Act (CCPA).
1. IntroductionThis policy applies to all users of our website and digital platforms. By accessing or using our services, you agree to the terms of this Privacy Policy.
2. Information We CollectWe may collect and process the following types of information:
Personal Identification Information: Name, email, phone number, physical address, social media handles, and any other data voluntarily submitted through our forms, registrations, or communications.
Technical Data: IP address, device type, browser, operating system, referring URLs, and browsing activity.
Cookies & Similar Technologies: We use cookies and tracking tools to improve user experience, personalize content, and analyze site usage. You can manage cookie preferences through your browser settings.
3. How We Use Your InformationWe process your personal data for the following purposes:
To deliver services and respond to inquiries.
To send you updates, newsletters, or marketing material (with your consent).
To personalize and improve our website and user experience.
To comply with legal and regulatory obligations.
For internal analytics and performance monitoring.
4. Legal Bases for Processing (GDPR & Kenya DPA)We rely on the following lawful bases:
Consent – When you explicitly agree to us processing your data.
Contractual Necessity – To fulfill our obligations to you.
Legal Obligation – When required to comply with local or international law.
Legitimate Interests – When processing is necessary for our operations and not overridden by your data rights.
5. Your RightsUnder GDPR (EU Residents):
Right to Access
Right to Rectification
Right to Erasure (“Right to be Forgotten”)
Right to Restrict Processing
Right to Data Portability
Right to Object
Right to Withdraw Consent at Any Time
Under Kenya's Data Protection Act (Kenyan Residents):
Right to be Informed
Right to Access
Right to Object
Right to Correction/Rectification
Right to Erasure
Right to Data Portability
Under CCPA (California Residents):
Right to Know what personal information is being collected and for what purpose.
Right to Delete personal data collected.
Right to Opt-Out of the sale of personal information (if applicable).
Right to Non-Discrimination for exercising any privacy rights.
6. Data Sharing & DisclosureWe do not sell your personal data. We may share your data with trusted third parties or service providers who assist in operating our website or delivering services, under strict confidentiality agreements. We may also disclose information where required by law or to protect our legal rights.
7. Data SecurityWe implement industry-standard security measures to protect personal data from unauthorized access, misuse, or disclosure. However, no digital platform is 100% secure; users are advised to take precautionary measures when sharing personal information online.
8. Data RetentionWe retain personal data only as long as necessary for the purposes stated in this policy or to comply with legal obligations. When data is no longer needed, it is securely deleted or anonymized.
9. International Data TransfersIf you are located outside Kenya and provide information to us, your data may be transferred to, stored, and processed in Kenya and other countries where our service providers are located. We take steps to ensure your data is handled securely and in accordance with this policy.
10. Third-Party LinksOur website may include links to external websites. We are not responsible for the privacy practices or content of such third-party sites.
11. Children’s PrivacyOur services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted data to us, please contact us, and we will promptly remove it.
12. Changes to This Privacy PolicyWe may update this Privacy Policy periodically to reflect legal or operational changes. We encourage users to review this page regularly. The "Effective Date" at the top indicates the latest revision.
13. Contact UsFor any questions, concerns, or requests regarding this Privacy Policy or your data, contact: 📧 [email protected] | [email protected]
