Privacy Policy
Last updated: February 18, 2026
1. Scope
This policy explains how SokoFinds Limited collects, uses, stores, and shares personal data under the Data Protection Act, 2019 (Kenya).
2. Data We Collect
We may collect identity and contact details, account profile data, transaction history, device and usage data, approximate location (where consented), and inferred preferences for personalization and fraud prevention.
3. Lawful Basis
Processing is based on contract performance, legal obligations, legitimate interests, and consent where required.
4. Profiling
We use profiling for recommendations, service quality, and fraud prevention. You may object to profiling for direct marketing.
5. Sharing
Data may be shared with merchants, payment providers, service providers, regulators, and transaction counterparties where needed for platform operations and legal compliance.
6. Security And Retention
We implement organizational and technical controls to protect data. Retention periods depend on account lifecycle, tax/legal obligations, and fraud/security needs.
7. Your Rights
You may request access, correction, deletion, objection, restriction, portability, and can lodge complaints with the ODPC.
8. Contact
Privacy queries: privacy@sokofinds.ke. DPO: dpo@sokofinds.ke.