Privacy Policy
Last Updated: 7th August 2025
This Privacy Policy describes how MaasaiSoko ("we," "us," or "our") collects, uses, and discloses your personal data when you use our website, mobile application, and related services (collectively, the "Platform"). It also outlines your privacy rights and how the law protects you under the Data Protection Act, 2019 of Kenya (the "Act"). By using our Platform, you agree to the collection and use of your information in accordance with this Privacy Policy.
1. Definitions
"Personal Data": Any information relating to an identified or identifiable natural person (a "data subject").
"Data Subject": The individual whose personal data is being processed. This is you, our customer.
"Processing": Any operation or set of operations performed on personal data, such as collection, storage, use, or disclosure.
"Data Controller": The person or entity that determines the purposes and means of processing personal data. In this case, we are the Data Controller.
"Data Processor": A person or entity that processes personal data on behalf of a data controller. This may include third-party service providers.
"Consent": Any freely given, specific, informed, and unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to you.
"Platform": Refers to our website, mobile application, and related services.
2. What Personal Data We Collect
When you onboard as a merchant or seller on our platform, we collect certain personal data to create your account, enable you to sell your products, and ensure a secure and trustworthy marketplace. The information we collect is limited to what's necessary for these purposes.
Identity and Business Information
Your full name and a copy of your national ID or passport for identity verification.
Your business registration certificate and KRA PIN certificate to verify your business's legal status in Kenya.
Contact Information
Your business address, billing address, email address, and phone numbers so we can communicate with you and process transactions.
Financial and Transaction Data
Payment details to process payouts from your sales.
Information about the products you list and sell on our platform.
Platform and Usage Data
Your username and password to secure your account.
Information about how you use our platform, such as your product listings and sales activity, preferences, feedback, and survey responses.
Technical data like your IP address to help us protect your account from fraudulent activity.
By providing this information, you help us create a safe and efficient environment for you to grow your business online.
3. How We Collect Your Personal Data
We use different methods to collect personal data from and about you, including:
Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
Create an account on our Platform.
List products and services on our Platform.
Subscribe to our newsletter.
Give us feedback.
Automated Technologies or Interactions: As you interact with our Platform, we will automatically collect Technical and Usage Data about your equipment, Browse actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. Please see our Cookie Policy for more details.
Third Parties: We may receive personal data about you from various third parties, such as:
Payment service providers, for Transaction Data.
Logistics and delivery partners, for Contact and Transaction Data.
Analytics providers.
4. How We Use Your Personal Data
We will only process your personal data where we have a lawful basis to do so under the Act. Most commonly, we will use your personal data for the following purposes:
To fulfill a contract with you such as to process and deliver your orders, manage payments, fees, and charges, and collect and recover money owed to us.
For our legitimate interests such as to manage our relationship with you, notify you about changes to our terms or Privacy Policy or Cookie Policy, and ask you to leave a review or take a survey. We also use your data to improve our Platform, products, and services, and for business management and planning.
With will seek your explicit consent before sending you direct marketing communications. You have the right to withdraw your consent at any time.
To comply with a legal obligation such as applicable laws, regulations, and government requests.
5. Disclosure of Your Personal Data
We may share your personal data with the following parties for the purposes set out above:
Service Providers such as payment gateways, logistics companies, and IT and system administration service providers.
Professional Advisers including lawyers, bankers, auditors, and insurers.
Regulators and other authorities who require reporting of processing activities in certain circumstances.
Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know. We have procedures in place to deal with any suspected personal data breach and will notify you and the Office of the Data Protection Commissioner (ODPC) of a breach where we are legally required to do so.
7. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
8. Your Legal Rights as a Data Subject
Under the Data Protection Act, you have the following rights regarding your personal data:
The right to be informed: You have the right to be provided with clear, transparent, and easily understandable information about how we process your personal data.
The right to access: You have the right to request a copy of the personal data we hold about you.
The right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
The right to erasure ("right to be forgotten"): You have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
The right to object to processing: You have the right to object to the processing of your personal data for direct marketing purposes.
The right to restrict processing: You have the right to "block" or suppress the further processing of your personal data.
The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
The right to complain: You have the right to lodge a complaint with the ODPC if you believe your rights have been violated.
9. How to Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us on email info@maasaisoko.co.ke
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. We will notify you of any significant changes by posting the new Privacy Policy on our Platform. We encourage you to review this Privacy Policy periodically for any changes.