Privacy Policy

1. What Personal Data Do We Collect?

Personal data refers to information that can identify an individual either independently or in conjunction with other data. You supply such data directly when interacting with our Apps, Sites, or services. The types of data we collect include:

• Registration Information: To create an account and access our services, you must provide essential information, such as your name, email address, or phone number. Additional details may be requested depending on your chosen services.
• Transaction and Experience Information: When you use our services to make purchases or payments, we collect transaction details, payment method information, device and technical usage data, and merchant details.
• Voluntary Information for Additional Services: Should you opt into specific features or enhanced services, we may request further information. Where this differs from standard practices, separate notification will be provided at the point of collection.
• Data Collection during Unbranded Service Use: For select unbranded services, you may interact with merchants without logging in to Syndikiza. In these cases, we collect necessary transaction data, which may later be associated with your account for experience improvement and compliance purposes.
• Additional User Interactions: We may gather more information if you communicate with us, contact support, or participate in surveys.

2. Why Do We Retain Personal Data?

We retain your personal data as required to comply with applicable laws (e.g., tax regulations). When no legal requirement persists, retention is based on relevant contractual obligations or the necessity to manage our ongoing relationship with you, plus a reasonable subsequent period.

If your account is closed, we may take measures to anonymize your personal data but will retain and access it as necessary to meet legal obligations. Continued use and disclosure will adhere to this privacy policy.

3. How Do We Process Personal Data?

Your personal data may be processed for the following purposes:

• Service Provision: Initiate transactions, authenticate access, communicate service updates, perform account verification, and maintain accurate account records.
• Operational Management: Monitor, analyze, and improve the performance and functionality of our apps, sites, and services, including user behavior research.
• Risk Management and Fraud Prevention: Protect our users and services from fraudulent activity through identity verification and analysis of device/geolocation data.
• Marketing: Promote Syndikiza's products, services, and those of affiliated businesses, tailoring content and experiences to your interests where permitted.
• Personalization: Offer targeted features or content, using cookies and tracking technologies to customize your experience.
• Location-Based Services: With your consent, utilize geolocation data to provide location-specific options and personalize content.
• Compliance: Fulfill legal and regulatory requirements, enforce service terms, and respond to your inquiries efficiently.

4. How We Disclose Personal Data

Customer information is treated as a critical business asset. We may disclose your personal data for the intended purpose(s) for which it was collected or when required by law or with your consent. Examples include:

• Third-Party Service Providers: To facilitate services, verify identities, or process transactions on our behalf.
• Partnered Financial Institutions: To offer co-branded products, process transactions, or maintain financial records.
• Transaction Participants: When facilitating a transaction, relevant details may be shared with merchants and other parties involved.
• Legal and Compliance Requirements: To comply with legal obligations, protect vital interests, manage risk, prevent fraud, or facilitate organizational changes such as mergers or acquisitions.
• Corporate Functions: Support audits, compliance, and governance activities.

We do not share your data with third parties for their marketing purposes without your explicit consent. Reasonable measures are taken to ensure all disclosed information is accurate, up-to-date, and relevant.

5. How To Access & Control Your Personal Data

Subject to limitations under Kenya's Data Protection and Privacy Law, you have rights regarding your personal data, including access, rectification, portability, restriction, objection, and deletion. It is your responsibility to provide accurate data; however, Syndikiza strives to maintain completeness and currency.

To exercise your rights, please contact us via the details provided in this policy.

6. How We Protect Your Personal Data

Protecting your data is our highest priority. We implement physical, managerial, and technical safeguards, including encryption, SSL technology, and secure storage protocols, to prevent unauthorized access, disclosure, modification, or loss.

While we endeavor to secure our systems, you are responsible for maintaining the confidentiality of your passwords and verifying the accuracy of your personal data.

7. How We Process Children's Personal Data

Our services are designed for adults. We do not knowingly collect data from individuals under 18, complying with Kenyan data protection regulations.

8. International Transfers of Your Personal Data

Given our operations across Africa and adoption of cloud services, your personal data may be processed in multiple jurisdictions. We ensure all data transfers comply with this policy and relevant national laws.

9. Updates To This Policy

Syndikiza reserves the right to modify this privacy policy at any time. The most recent version will be available on our website. Significant changes may result in additional notifications through various channels.

10. How To Contact Us

For questions, suggestions, or privacy concerns, please contact our Data Protection Officer at compliance@syndikiza.com

11. Definitions

• Personal Data: Information that identifies or can be associated with an individual, such as name, email, phone number, payment details, or identification numbers.
• Process: Any operation performed on personal data, whether automated or manual, including collection, storage, retrieval, use, disclosure, or destruction.
• Account: A registered individual or business account within Syndikiza.
• Device Information: Automatically collected data from devices accessing our services, such as device type, ID, network information, IP address, browser details, etc.
• Services: All products, functionalities, technologies, and related applications offered by Syndikiza.
• User: Any individual or merchant utilizing Syndikiza's services or accessing our apps and sites.