This Privacy Policy explains how MoJamoza Technologies ("we", "us") handles personal data through MojaDuka, in line with Kenya's Data Protection Act, 2019. It covers two separate relationships, described below, because they involve different responsibilities under the Act.
For our own clients — the business owners who pay for a hosted store — we act as the data controller. We decide why and how we collect and use their information (name, phone, business details, billing records) to provide and bill for the service.
For each store's shoppers — the customers who submit their name, phone number, or birthday through a store's order form — the business owner is the data controller, and MojaDuka acts only as the data processor, storing that information on the business owner's behalf and under their instruction. We do not use a store's customer data for our own purposes, and we do not sell or share it with third parties.
We do not knowingly collect sensitive personal data as defined under the Act (such as health status, ethnicity, religious belief, or biometric data) through this Platform, and store owners should not request it through their store either.
To create and operate a store, process a shopper's inquiry so the business owner can follow up, bill for hosting, maintain the free directory listing (for clients who opt in), and keep the Platform secure.
We apply reasonable technical safeguards including access-restricted admin accounts, encrypted connections (HTTPS), and hashed passwords. No online system is completely risk-free, and we continue to review our safeguards as the Platform grows.
Client and customer data is retained for as long as the associated store is active, and for a reasonable period afterward for legal, billing, or dispute-resolution purposes, after which it is deleted on request or as part of routine cleanup.
Under the Data Protection Act, 2019, a data subject has the right to access their personal data, request correction of inaccurate data, request erasure in certain circumstances, object to processing, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC). Shoppers wishing to exercise these rights over data held by a specific store should contact that business owner directly, as they are the data controller for that information. Business owners can contact us directly for data we hold about their own account.
Data is currently hosted within standard cPanel hosting infrastructure. If this changes to include storage or processing outside Kenya, we will update this policy accordingly and apply appropriate safeguards as required under the Act.
We may update this Privacy Policy from time to time. Material changes will be communicated to active clients directly.
Questions about this policy, or requests relating to your personal data, can be sent via WhatsApp to 2547XXXXXXXX.