1. Introduction

Welcome to ekarihub, a platform designed to facilitate the trading of agricultural goods and services. ekarihub (the Hub) is a product of EKABEL LIMITED, a company registered in Kenya under Registration Number CPR/2015/81281 (the Company).

Protecting your privacy is essential to us. This Privacy Policy explains how we collect, use, share, and protect your personal data and applies to all users of ekarihub, including buyers, sellers, logistics providers, input suppliers, and any other stakeholders using the Hub. It governs the collection, use, storage, and transfer of personal data provided through our website and services in compliance with the Data Protection Act, 2019 of Kenya.

By using the Hub, you agree to this Privacy Policy. If you do not agree, please refrain from using the Hub.

2. Definitions

• Business Purpose refers to the discussions, planning, design, and development of ekarihub, including all related business strategies, market analysis, and technological implementation.
• Data Controller means Ekabel Limited, the entity that determines how and why personal data is processed.
• Data Processor means Ekabel Limited, the entity that processes data on behalf of the Data Controller.
• Personal Data means any information that can identify an individual, such as names, contact information, and trade details.
• Users means individuals or entities using ekarihub for trading goods and services.

3. What we collect

We may collect the following data when you use the Hub:

• Personal Identification Information such as names, phone numbers, email addresses, national identification details (ID/passport) and user account credentials, including usernames and passwords.
• Transaction Details which will include purchase history, product descriptions, payment details and delivery information.
• Technical Information including IP address, device information, browser type, operating system, and usage data collected through cookies, analytics, and user feedback and similar technologies.
• Third-Party Data which will include data from third-party sources or integrations, such as payment service providers, logistics partners, and external databases.

4. Legal Basis for Data Processing

We process your personal data based on the following legal grounds under the Data Protection Act:

• Consent: When you have given us explicit consent for data processing.
• Contract Performance: Data processing is necessary for the performance of a contract with you.
• Legal Obligation: When we are required to comply with a legal obligation such as tax or anti-money laundering laws.
• Legitimate Interest: When processing is necessary for the legitimate interests of the Hub such as analyzing platform activity and improve services, provided it does not override your rights.
• Public Interest such as data sharing with government authorities for public safety concerns or exercising official authority.

5. How We Collect Your Data

• When you register or create an account.
• When you use the Hub to list, buy, or sell goods and services.
• Through automated means such as cookies and other tracking technologies.

6. How We Use Your Information

Your personal data may be used for the following purposes:

• To Provide Services, facilitate transactions, manage user accounts, and deliver products/services.
• Communication: To notify you of updates, respond to inquiries, and send promotional content (with your consent).
• Security: Detect and prevent fraud, abuse, or unauthorized activities on the platform.
• Compliance: Fulfill legal and regulatory requirements, including tax and financial reporting obligations.
• Analytics: Conduct market research and analyze user behavior to improve our services.
• Complying with legal and regulatory obligations.

7. Data Sharing and Disclosure

We may share your personal data in the following scenarios:

• With Service Providers: We may share your data with third-party service providers (e.g., payment processors, logistics partners) and other essential service providers who assist in delivering our services.
• With Affiliates: Data may be shared with EKABEL LIMITED’s affiliates for the Business Purpose of the Hub.
• With Regulatory Authorities for Legal Compliance: We may disclose your data if required by law, court order, or government authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

We do not sell your personal data to third parties.

8. International Data Transfers

If your data is transferred outside Kenya, we will ensure that the receiving entity provides an adequate level of data protection in compliance with the Data Protection Act, 2019.

9. Data Storage and Retention

ekarihub utilizes third-party cloud services to store and manage User data. We do not store data on servers managed by Ekabel Limited. Instead, User data is securely stored in cloud infrastructure provided by reputable cloud service providers, who are compliant with international data protection standards.

Our cloud service providers implement appropriate security measures to protect your data, including encryption, access control, and regular security assessments. However, please note that while we strive to protect your data, no method of electronic storage or transmission is completely secure.

Your data may be stored on servers located in different countries, depending on the cloud service provider's infrastructure. By using the Hub, you consent to the transfer of your data to these servers, which may be outside Kenya, in compliance with the relevant data protection laws.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once your data is no longer needed, it will be securely deleted or anonymized.

10. Data Security

EKABEL LIMITED implements industry-standard security measures, including encryption, firewalls, and secure access protocols, to protect your data from unauthorized access, breaches, misuse loss, or alteration. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. Your Data Rights

As a user, you have the following rights under the Kenya Data Protection Act, 2019:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data, subject to legal obligations.
• Right to Restrict Processing: You can request that we limit the processing of your data.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used format.
• Right to Object: You can object to the processing of your data for certain purposes, such as direct marketing.
• Right to Withdraw Consent: If you have given consent for data processing, you can withdraw it at any time.

To exercise these rights, please contact us using the details provided in Section 14.

12. Use of Cookies and Tracking Technologies

ekarihub uses cookies and similar tracking technologies to improve user experience, gather analytics, and support our marketing efforts. Cookies collect technical information such as browsing behavior and preferences. By using the platform, you consent to the use of cookies. You can manage your cookie preferences through your browser settings, , but disabling cookies may affect certain features of the platform.

13. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in the Hub. We will notify you of any material changes by posting the updated policy on our website and updating the "Effective Date" above.

14. Contact Information

If you have questions about this Privacy Policy, or if you would like to exercise your data rights, please contact us at:

Data Controller and Processor:
EKABEL LIMITED
P.O. Box 10812-00100, Nairobi.
Email: legal@ekabell.com

15. Liability for Data Management

EKABEL LIMITED is ultimately responsible for compliance with data protection laws and for ensuring the lawful basis for processing user data.