Privacy Policy

1. Introduction

SACCO Reports Kenya ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SACCO background check service.

By accessing or using our service, you agree to this Privacy Policy. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We collect information that you voluntarily provide to us when purchasing SACCO reports:

• Contact Information: Email address, phone number
• Payment Information: Processed securely through Flutterwave (we do not store credit card details)
• SACCO Selection: Which SACCOs you request reports for

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Usage Data: Pages visited, time spent, clicks
• Device Information: Browser type, IP address, device type
• Cookies: Small data files stored on your device (see Cookie Policy below)

3. How We Use Your Information

We use your information to:

• Process Transactions: Fulfill your SACCO report orders
• Deliver Reports: Send PDF reports to your email
• Customer Support: Respond to inquiries and provide assistance
• Payment Processing: Process payments through Flutterwave
• Service Improvement: Analyze usage to improve our service
• Legal Compliance: Comply with Kenyan laws and regulations
• Fraud Prevention: Detect and prevent fraudulent transactions

4. Data Sharing and Disclosure

We share your information with:

• Payment Processors: Flutterwave for payment processing (subject to their privacy policy)
• Email Service: Resend for delivering PDF reports to your email
• Database Provider: Supabase for secure data storage (encrypted)
• Legal Authorities: When required by law or to protect our rights

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission
• Secure Storage: Data stored in Supabase with row-level security
• Payment Security: PCI-DSS compliant payment processing via Flutterwave
• Access Controls: Limited employee access to personal data
• Regular Audits: Security assessments and vulnerability scans

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill transactions
• Comply with legal obligations (minimum 7 years for financial records under Kenyan law)
• Resolve disputes and enforce our agreements

You may request deletion of your personal data by contacting us (see Section 9).

7. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access: Request copies of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (right to be forgotten)
• Object: Object to processing of your data
• Portability: Request transfer of your data to another service
• Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at privacy@saccoreports.ke

8. Cookies Policy

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for site functionality (e.g., shopping cart)
• Analytics Cookies: Understand how visitors use our site
• Preference Cookies: Remember your settings

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

Continued use of our service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

12. Governing Law

This Privacy Policy is governed by the laws of Kenya, including:

• The Data Protection Act, 2019
• The Computer Misuse and Cybercrimes Act, 2018
• The Kenya Information and Communications Act

Any disputes shall be resolved in accordance with Kenyan law and jurisdiction.