Tabeza Privacy Policy

Effective Date: December 29, 2024

1. Introduction

Tabeza is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the Kenya Data Protection Act, 2019.

2. Information We Collect

Personal Information

Name and contact details
Email address and phone number
Payment information (encrypted)
Bar/establishment details

Usage Data

Order history and preferences
Payment transactions
App usage patterns
Device and browser information

Location Data

General location (with consent)
Bar/restaurant location data
GPS coordinates (optional features)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the Kenya Data Protection Act, 2019:

Consent: You freely give specific, informed, and unambiguous consent
Contract: Processing is necessary for our service contract with you
Legal Obligation: Compliance with Kenyan legal requirements
Legitimate Interests: For fraud prevention and service improvement

4. Data Security Measures

Encryption

All data is encrypted using industry-standard protocols

Secure Storage

Data stored in secure Kenyan data centers where possible

5. Your Data Rights

Under the Kenya Data Protection Act, 2019, you have the following rights:

Right to be Informed: Know what data is collected and why
Right of Access: Request access to your personal data
Right to Correction: Request correction of inaccurate data
Right to Erasure: Request deletion of your personal data
Right to Portability: Receive your data in a usable format
Right to Object: Object to automated decision-making
Right to Restrict: Limit processing of your data

6. Data Sharing and Disclosure

We do not sell your personal information. We only share data in the following circumstances:

Payment Processors: For transaction processing (encrypted)
Service Providers: Essential for service delivery
Legal Requirements: When required by Kenyan law
Business Transfers: With notice in case of acquisition

7. International Data Transfers

Your personal data may be transferred outside Kenya for service provision. Such transfers only occur to countries with adequate data protection laws or with appropriate safeguards in place, as required by the Kenya Data Protection Act.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, in accordance with Kenyan legal requirements and our legitimate business interests.

Account data: Retained while your account is active
Transaction data: Retained for 7 years (tax compliance)
Support requests: Retained for 2 years

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookie settings through your browser preferences.

10. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect personal information from children under 18 without parental consent.

11. Data Breach Notification

In accordance with the Kenya Data Protection Act, we will notify you and the Office of the Data Protection Commissioner of any data breach that is likely to pose a risk to your rights and freedoms within 72 hours of becoming aware of the breach.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date.

13. Contact Information

Data Protection Officer: support@tabeza.co.ke

Hotline: +254 722 527236

Office: Nairobi, Kenya

Office of the Data Protection Commissioner: support@tabeza.co.ke

Last Updated: December 29, 2024 |Compliance: Kenya Data Protection Act, 2019