Privacy Policy — Sitechx

Sitechx Technologies Ltd ("Sitechx", "we", "us", "our") is committed to protecting the privacy of all users of our platform. This Privacy Policy explains what data we collect, how we use it, and your rights under the Kenya Data Protection Act 2019.

1. Data We Collect

We collect the following categories of data when you register and use our platform:

Identity data: Full name, National ID number, passport number, selfie photograph for KYC verification.
Business data: Business registration number, KRA PIN, business name, physical address, and business type.
Contact data: Email address, phone number, and postal address.
Transaction data: Order history, payment amounts, escrow events, and delivery records.
Technical data: IP address, device fingerprint, browser type, and usage logs for fraud prevention purposes.

2. How We Use Your Data

We use your data to:

Verify your identity and business registration (KYC/KYB process).
Process and protect payments through our escrow engine.
Match buyers with verified sellers and courier partners.
Run AI fraud detection and platform security systems.
Generate transaction records, invoices, and compliance reports.
Send service notifications and account updates (not marketing without consent).

3. Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

With verified trade partners you have transacted with (only transaction-relevant data).
With regulated financial institutions processing escrow and payments.
With government authorities when required by Kenyan law (e.g. KRA, DCI).
With infrastructure providers (cloud hosting) under strict data processing agreements.

4. Data Retention

Transaction records are retained for a minimum of 7 years in compliance with Kenya's tax and financial regulations. Account data is deleted within 30 days of a verified account closure request, except where legal retention obligations apply.

5. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to: access your personal data, correct inaccurate data, request deletion (subject to legal obligations), object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these rights, contact us at: privacy@sitechx.com

6. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to personal data is restricted to authorised personnel with logged, audited access. We conduct regular third-party penetration tests and maintain an ISO 27001-aligned security posture.

7. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email and in-platform notification at least 14 days before changes take effect.

8. Contact

Data Controller: Sitechx Technologies Ltd, Westlands, Nairobi, Kenya.
Data Protection Officer: privacy@sitechx.com