Privacy Policy
Powered by Linkora Digital Ltd
Last Updated: 12.01.2025
1. Introduction
JiKonnect respects your privacy and handles data per the Kenya Data Protection Act (2019) and ODPC guidelines.
2. Data We Collect
2.1 Clients
- Full name
- Phone number
- Email address
- Service location
- Booking details
- Payment confirmation
- Reviews & ratings
- Profile image/photo uploaded at signup
- Any optional data voluntarily provided
2.2 Service Providers
- Full name
- National ID number (KYC)
- Phone & email
- Physical location
- Skills & qualifications
- Certificates or licenses
- Background-check data
- Profile photo/headshot
- Next-of-kin details (optional)
- Portfolio photos
- Payment details (M-Pesa/bank)
2.3 Sensitive Personal Data
JiKonnect does not collect sensitive data unless absolutely required. However, for categories like caregiving, JiKonnect may process limited health-related information only when needed and with explicit consent.
2.4 Automatically Collected Data
- IP address
- Device information
- Browser type
- Usage logs
- Cookies
2.5 Media Data
- Images or videos uploaded by Providers to document work
- Voice or video recordings if communication features are introduced
3. How We Use Personal Data
3.1 Platform Operations
- Account creation
- Identity verification
- Provider vetting
- Booking management
- Payment processing
- Notifications & receipts
3.2 Trust & Safety
- Fraud detection & security monitoring
- Maintaining audit logs
- Assessing provider eligibility
- Generating a Provider Trust Score based on:
- ID verification
- Background checks
- Ratings
- Completion rate
3.3 Marketing & Communications
JiKonnect may use data to:
- Send job alerts (Providers)
- Send service updates (Clients)
- Notify users about changes
- Promote new features
- Send training opportunities
Users may opt out of marketing but not safety or operational messages.
3.4 Anonymized Data Use
JiKonnect may anonymize and aggregate data for:
- Market analysis
- Product improvement
- Business insights
- Reporting
Anonymized data is not personal data and may be shared with partners.
4. Lawful Basis for Processing
- Consent
- Contract performance
- Legal obligation
- Legitimate interest
5. Data Sharing
JiKonnect shares data with:
5.1 Service Providers
Clients see only necessary details.
5.2 Payment Partners (e.g., M-Pesa)
Limited to payment processing data.
5.3 Verification Partners
Example categories:
- ID verification firms
- Background-check agencies
They receive only the minimum necessary data (e.g., name, ID number).
5.4 Hosting & Analytics Partners
For infrastructure and service improvement.
5.5 Government/ODPC
If legally required.
JiKonnect does not sell personal data.
6. Security
JiKonnect implements:
- Encryption
- Secure cloud storage
- Access controls
- Security audits
- Incident response processes
Employee Data Protection Training
Access to Personal Data is restricted to authorized staff who:
- Undergo mandatory data protection training
- Are bound by confidentiality agreements
7. Data Retention
Data is retained only as long as necessary for:
- Legal requirements
- Financial audits (minimum 5 years)
- Fraud prevention
- Operational purposes
8. Your Rights
Under Kenya Data Protection Act, you have the right to:
- Access your data
- Rectify inaccuracies
- Restrict Processing
- Request deletion
- Object to processing
- Request portability
- Withdraw consent
Deletion Limitations
Deletion may be restricted due to:
- Legal retention (e.g., financial audits, 5+ years)
- Preventing fraud
- Dispute resolution
Rights Request Process
All rights requests must be sent to: privacy@jikonnect.co.ke
Response time: within 21-30 days.
9. Children's Data
No data is collected from minors under 18.
10. Cross-Border Transfers
JiKonnect may store data outside Kenya. Example: hosting in Ireland (EU).
Safeguard mechanisms include:
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (BCRs)
Compliant with ODPC requirements.
11. Breach Notification
If a breach occurs, JiKonnect will notify:
Notification will include:
- Nature of the breach
- Measures taken
- What users can do to protect themselves