Effective Date: 26/September/2025
Last Updated: 26/September/2025

Enkaji Care (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal data is handled in compliance with the Data Protection Act, 2019 (Kenya).

This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information.

1. Information We Collect

We may collect and process the following categories of personal data:

  • Identity Information – full name, national ID/passport number, date of birth.
  • Contact Information – phone number, email address, postal/physical address.
  • Financial Information – payment details, billing information.
  • Usage Data – information on how you access and use our services (e.g., IP address, browser type, device identifiers).
  • Other Information – any information you voluntarily provide when communicating with us.

2. Legal Basis for Processing

We process your personal data in accordance with the principles of lawfulness, fairness, and transparency under the Act. Processing is based on one or more of the following legal grounds:

  • Consent you have provided.
  • Performance of a contract with you.
  • Compliance with a legal obligation.
  • Legitimate interests pursued by us or a third party, provided such interests do not override your rights.

3. How We Use Your Information

We may use your personal data for the following purposes:

  • To provide and improve our services.
  • To process payments and issue invoices.
  • To communicate with you, including responding to inquiries.
  • To comply with legal and regulatory requirements.
  • To enhance security and prevent fraud.
  • For marketing purposes, with your consent.

4. Data Sharing and Disclosure

We do not sell or rent your personal information. However, we may share data in the following circumstances:

  • With service providers or business partners who assist in delivering our services (subject to confidentiality agreements).
  • When required by law, regulation, or court order.
  • To protect our rights, property, or safety, or that of others.
  • In connection with a business transfer, merger, or acquisition.

5. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law.

6. Data Security

We implement appropriate technical and organizational measures to safeguard your personal information against unauthorized access, loss, misuse, alteration, or disclosure.

7. Your Rights

Under the Data Protection Act, 2019, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data (“right to be forgotten”).
  • Object to or restrict the processing of your data.
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise these rights, contact us at [Insert Contact Email/Phone].

8. Cross-Border Data Transfers

If your personal data is transferred outside Kenya, we will ensure that adequate safeguards are in place in compliance with the Act.

9. Cookies and Tracking

We may use cookies or similar technologies to enhance user experience, analyze site traffic, and provide tailored content. You can adjust your browser settings to decline cookies, although some features may not function properly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.

11. Contact Us

If you have questions or concerns regarding this Privacy Policy or our data practices, please contact us at: info@enkajicare.co.ke