Privacy Policy

1. Information We Collect

At ChamaSpace, we collect and process various types of information to deliver, enhance, and personalize our services. This section outlines the categories of information we collect, including but not limited to:

• a) Personal Identifiable Information (PII):

  • Full Names: We collect your full legal names to personalize your experience and ensure accurate identification.
  • ID Number: Your identification number is collected to comply with regulatory requirements and verify your identity.
  • Address: We collect your postal and physical address to facilitate account-related communication and transactions.
  • Phone Number: Your contact number is essential for communication, security, and account verification purposes.
  • Email Address: We may request your email address for account-related notifications and support communication.
  • Mpesa Registered Number: If applicable, we collect your Mpesa registered number for payment and transaction purposes.
• b) Additional Information:

  • Source of Referral: We may ask how you heard about ChamaSpace to understand the effectiveness of our marketing efforts and improve our services.
  • Cookies: We utilize cookies for website functionality, analytics, and personalized content delivery. Please refer to our Cookies and Tracking Technologies section for more details.
• c) Children's Privacy:

  ChamaSpace services are intended for individuals who are at least 18 years old. We do not knowingly collect or process information from individuals under the age of 18.

2. How We Use Collected Information

ChamaSpace utilizes the information we collect for various purposes, ensuring the delivery of efficient and personalized services. Here's an overview of how we use the collected information:

• a) Mpesa Information for Transactions:

  • Processing Withdrawals and Deposits: Your Mpesa registered number is essential for processing financial transactions, including withdrawals and deposits, ensuring a seamless and secure payment experience.
• b) Account Opening and Verification:

  • Account Creation: Full names, ID number, address, phone number, and email address are collected during the account creation process to establish and personalize your ChamaSpace account.
  • Verification: We use collected information, including your ID number, for identity verification purposes to comply with regulatory requirements and ensure the security of your account.
• c) KYC (Know Your Customer):

  • Compliance: We collect certain personal information, such as your ID number, to adhere to Know Your Customer (KYC) regulations and foster a secure and compliant financial environment.

3. Data Sharing and Disclosure

At ChamaSpace, we prioritize the privacy and security of your data. Our approach to data sharing and disclosure is guided by transparency and the necessity to deliver our services effectively. Below, we outline how and when we may share your data:

• a) Service Providers:

  ChamaSpace may engage trusted third-party service providers to facilitate various aspects of our services. These service providers may have access to your data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

• b) Legal Compliance:

  We may disclose your information when required by law, regulatory authorities, or other legal processes. This includes situations where we believe disclosure is necessary to comply with a judicial proceeding, court order, legal request, or government investigation.

• c) Consent:

  Your data privacy matters to us. ChamaSpace will not share your personal information with third parties for marketing purposes without your explicit consent. You have the right to control and manage your preferences regarding data sharing.

4. Security Measures

At ChamaSpace, the security of your data is of paramount importance. We employ a comprehensive set of measures to safeguard your information from unauthorized access, disclosure, alteration, and destruction. Our commitment to ensuring the confidentiality and integrity of your data includes the following security measures:

• a) Encryption:

  All data transmitted between your device and ChamaSpace is encrypted using industry-standard protocols. This encryption ensures that your information remains confidential during transit.

• b) Access Controls:

  Access to your data within ChamaSpace is strictly controlled and limited to individuals with a legitimate need to access such information. Our access controls ensure that only authorized personnel can view or manage specific data.

• c) Regular Security Audits:

  We conduct regular security audits and assessments to identify and address potential vulnerabilities in our systems. These audits are designed to uphold the highest security standards and ensure ongoing protection against emerging threats.

5. User Rights

At ChamaSpace, we recognize and respect your rights regarding the data you share with us. Your control over your personal information is fundamental to our commitment to transparency and user-centric data management. Here are your rights and how we ensure you can exercise them:

• a) Access:

  You have the right to access the personal information we hold about you. If you wish to obtain a copy of this information, please contact us at chamabora2021@gmail.com. We will respond to your request in a timely manner.

• b) Correction:

  If you believe that any information we hold about you is inaccurate or incomplete, you have the right to request corrections. You can update certain details directly through your ChamaSpace account settings. For other corrections, please reach out to us at chamabora2021@gmail.com.

• c) Deletion:

  You have the right to request the deletion of your personal information under certain circumstances. If you would like to exercise this right, please contact us at chamabora2021@gmail.com. We will review your request and take appropriate action in accordance with applicable data protection laws.

6. Data Retention

At ChamaSpace, we are transparent about how long we retain your personal information and the criteria we use for determining retention periods. Our data retention practices are designed to balance the need for information with privacy considerations. Here's an overview of our data retention policies:

• a) Retention Periods:

  The retention periods for different categories of personal information may vary based on legal requirements, the purpose for which the data was collected, and operational needs. Specific retention periods are outlined in our internal data retention policy, which aligns with applicable data protection laws.

• b) Account Deactivation:

  If you choose to deactivate your ChamaSpace account, we will retain your personal information for a limited period following account deactivation. This retention is for purposes such as facilitating account reactivation if you decide to return to ChamaSpace.

• c) Deletion and Anonymization:

  At the end of the applicable retention periods, your personal information will be securely deleted or anonymized to prevent identification. Anonymized data may be retained for statistical and analytical purposes, ensuring that insights can be derived without compromising individual privacy.

7. Cookies and Tracking Technologies

ChamaSpace utilizes cookies and tracking technologies to enhance your user experience, provide personalized content, and improve the functionality of our services. This section outlines how we use these technologies, the information they collect, and your control over their usage:

• a) Types of Cookies:

  We use various types of cookies, including essential cookies that are necessary for the basic functioning of our website or application. These may include session cookies, which are temporary and deleted when you close your browser, and persistent cookies, which remain on your device for a set period.

8. Changes to the Privacy Policy

At ChamaSpace, we are committed to transparency and will keep you informed about updates to our Privacy Policy. This section outlines how we communicate changes and updates:

• a) Notification of Changes:

  When there are material changes to our Privacy Policy, we will notify you through prominent notices on our website or through other communication channels. Material changes may include modifications that affect your rights or the way we handle your personal information.

9. Governing Law

ChamaSpace operates within the legal framework of the Republic of Kenya, and as such, our services and this Privacy Policy are governed by the laws of Kenya. Here are key points regarding the governing law:

• a) Jurisdiction:

  Any disputes, claims, or legal actions arising from or related to our Privacy Policy and the use of ChamaSpace services shall be subject to the exclusive jurisdiction of the courts of the Republic of Kenya.

• b) Applicable Law:

  This Privacy Policy and the use of ChamaSpace services are subject to and governed by the laws of the Republic of Kenya. Any legal matters, interpretation, or disputes will be resolved in accordance with Kenyan law.

• c) Compliance with Regulations:

  ChamaSpace is committed to adhering to all applicable laws and regulations in Kenya concerning data protection, privacy, and any other relevant legislation. Our practices are designed to comply with the legal requirements of the jurisdiction in which we operate.

• d) User Consent:

  By using ChamaSpace services, you consent to the application and interpretation of this Privacy Policy in accordance with the laws of Kenya. Users are expected to comply with the applicable laws and regulations governing their use of our services.

• d) Updates in Accordance with Law:

  By using ChamaSpace services, you consent to the application and interpretation of this Privacy Policy in accordance with the laws of Kenya. Users are expected to comply with the applicable laws and regulations governing their use of our services.

• d) Updates in Accordance with Law:

  Any updates or modifications to this Privacy Policy will be made in compliance with the laws of Kenya. We will ensure that our practices align with the legal requirements of the jurisdiction and that users are appropriately informed of any changes.