Privacy Policy

Welcome to Thayu.Market, your peaceful online marketplace where smart deals meet peace of mind.
This Privacy Policy explains how we collect, use, protect, and share your personal information when you access or use our website, mobile app, and related services (collectively referred to as the “Platform”).

By using Thayu.Market, you consent to the terms of this Privacy Policy and the processing of your personal data as outlined below.

1. PURPOSE OF THIS POLICY

Thayu.Market is committed to protecting your privacy and handling your personal information responsibly.
This policy describes:

  • The information we collect from you;

  • How we use and store it;

  • How and when it may be shared; and

  • Your rights regarding your personal data.

Our data practices comply with the Kenya Data Protection Act, 2019, and international privacy standards such as the General Data Protection Regulation (GDPR) where applicable.

2. INFORMATION WE COLLECT

We collect information directly from you, automatically when you use our services, and from third parties as described below.

2.1 Information You Provide Directly

When you interact with Thayu.Market, you may provide the following information:

  • Personal Identification: Your full name, phone number, email address, and physical location.

  • Account Credentials: Username, password, and any authentication data used to log in.

  • Business Information: Company name, business registration details, and KRA PIN (for business accounts).

  • Listings and Transactions: Details of products or services you list or purchase, including prices, descriptions, and associated media.

  • Payment Information: M-Pesa numbers or transaction reference codes for premium services. (Note: Thayu.Market does not store card or mobile wallet PINs.)

  • Communications: Messages, feedback, or queries submitted via our contact forms or chat features.

2.2 Information Collected Automatically

When you use our Platform, we automatically collect certain data such as:

  • Device Information: Type of device, operating system, browser type, and IP address.

  • Usage Data: Date, time, and duration of your sessions; pages viewed; and actions taken.

  • Location Data: Approximate geolocation derived from IP or GPS (if enabled).

  • Cookies and Tracking Technologies: To enhance your browsing experience and provide personalized services.

2.3 Information from Third Parties

We may receive information about you from:

  • Payment processors (e.g., Safaricom M-Pesa, card providers) for payment verification.

  • Public databases and fraud prevention services.

  • Social media platforms (if you sign up using Facebook or Google).

3. HOW WE USE YOUR INFORMATION

We use your information only for lawful purposes and in accordance with this Policy.
The key purposes include:

  1. Account Management:
    To register, verify, and maintain your user account.

  2. Service Delivery:
    To enable you to post listings, browse products, and communicate with other users.

  3. Payment Processing:
    To facilitate payments for premium ads or services via approved gateways.

  4. Customer Support:
    To respond to inquiries, resolve disputes, and provide assistance.

  5. Personalization:
    To tailor listings, promotions, and recommendations to your preferences.

  6. Platform Improvement:
    To analyze usage trends, detect issues, and enhance user experience.

  7. Fraud Prevention and Security:
    To prevent unauthorized access, detect fraudulent activity, and maintain the integrity of the Platform.

  8. Legal and Regulatory Compliance:
    To comply with Kenyan laws, law enforcement requests, or court orders.

4. LAWFUL BASIS FOR PROCESSING DATA

Thayu.Market processes personal data under one or more of the following lawful bases:

  • User Consent: When you voluntarily provide personal information or agree to specific uses.

  • Contractual Necessity: When processing is required to provide our services or fulfill our agreement with you.

  • Legal Obligation: When required to comply with applicable law.

  • Legitimate Interests: When processing supports security, fraud prevention, and service improvement without infringing your rights.

5. DATA RETENTION

We retain personal data only as long as necessary to:

  • Fulfill the purposes outlined in this Policy;

  • Comply with legal, tax, or accounting requirements; or

  • Resolve disputes and enforce agreements.

Inactive accounts may be deleted or anonymized after 24 months of inactivity, subject to applicable law.

6. DATA SECURITY

We employ robust technical and organizational security measures to protect your personal data against:

  • Unauthorized access,

  • Accidental loss,

  • Destruction, or

  • Disclosure.

These measures include encryption, secure hosting, firewalls, and limited staff access based on role.

However, while we strive for the highest standards, no system is entirely foolproof. You acknowledge that transmitting data over the internet carries inherent risks, and Thayu.Market cannot guarantee absolute security.

7. SHARING AND DISCLOSURE OF INFORMATION

We may share personal data in the following cases:

7.1 With Service Providers

Trusted third parties who perform functions on our behalf, such as:

  • Payment gateways (e.g., Safaricom M-Pesa, card processors).

  • IT support and hosting providers.

  • Analytics and advertising partners.

These third parties are contractually bound to safeguard your data and use it only as instructed.

7.2 For Legal Compliance

We may disclose your information:

  • To comply with lawful requests by public authorities, regulators, or courts.

  • To enforce our Terms and Conditions.

  • To investigate fraud, harassment, or illegal activities.

7.3 Business Transfers

In case of a merger, acquisition, or restructuring, user data may be transferred to the new entity, subject to continued privacy protection.

7.4 With Your Consent

We may share your data for marketing or promotional purposes only with your explicit consent.

8. COOKIES AND TRACKING TECHNOLOGIES

Cookies are small text files stored on your device when you visit our Platform.
We use cookies to:

  • Remember your login sessions.

  • Analyze traffic and usage patterns.

  • Deliver personalized content.

You can manage or disable cookies through your browser settings, but certain features may not function properly if cookies are disabled.

9. YOUR RIGHTS UNDER THE KENYA DATA PROTECTION ACT

You have the following rights regarding your personal data:

  1. Right to Access: Request a copy of your personal data held by us.

  2. Right to Rectification: Request correction of inaccurate or incomplete data.

  3. Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data in certain circumstances.

  4. Right to Restrict Processing: Request limited use of your data.

  5. Right to Data Portability: Request your data in a structured, machine-readable format.

  6. Right to Object: Object to processing for direct marketing or other legitimate interests.

  7. Right to Lodge a Complaint: File a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights are violated.

To exercise your rights, contact us using the details in Section 13.

10. CHILDREN’S PRIVACY

Thayu.Market is not intended for users under 18 years of age.
We do not knowingly collect or store personal data from minors.
If we become aware that a child has provided personal information, we will promptly delete it.

11. INTERNATIONAL DATA TRANSFERS

While Thayu.Market primarily processes and stores data in Kenya, some data may be processed or stored on secure servers located in other jurisdictions that provide equivalent data protection standards.
We ensure that international transfers are safeguarded using legally approved mechanisms.

12. MARKETING COMMUNICATIONS

We may send you notifications, service updates, and promotional messages related to Thayu.Market.
You can opt out of marketing messages at any time by:

  • Clicking “unsubscribe” in the message, or

  • Contacting our support team.

Please note that essential notifications such as payment confirmations or account security alerts cannot be opted out of.

13. CONTACT INFORMATION

If you have questions, concerns, or requests about this Privacy Policy, you can reach us at:

📧 Email: privacy@thayu.market