Privacy Policy

Effective 12 August 2025 • Last updated 20 April 2026
Maabara Online is committed to protecting your privacy in full compliance with the Kenya Data Protection Act, 2019 and the EU GDPR (where applicable).

Privacy Policy

This Privacy Policy explains how Maabara Online collects, uses, discloses, and safeguards personal data when you use our platform(s).

1. Introduction

Maabara Online is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This policy outlines our practices regarding the collection, processing, and protection of your personal data.

2. Information We Collect

We may collect personal information that you provide directly to us, including:

  • Name
  • Email address
  • Phone number
  • Payment information
  • Any other information you voluntarily provide while using our platform

We may also collect usage data and technical information related to your interaction with our services to help improve user experience and platform performance.

3. How We Use Your Information

The information collected may be used for the following purposes:

  • Providing and improving our services
  • Processing payments and managing transactions
  • Communicating with you regarding our services
  • Complying with legal and regulatory obligations
  • Conducting analytics and service improvements, where consent is required

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Performance of a contract
  • Legitimate business interests
  • Compliance with legal obligations
  • User consent where required by applicable laws

5. Sharing of Personal Data

Maabara Online does not sell your personal data. We may share information only in the following circumstances:

  • With trusted service providers operating under strict confidentiality agreements
  • With affiliates where appropriate consent has been provided
  • Where disclosure is required by law, regulation, or a valid legal process such as a court order

6. International Transfers

Where personal data is transferred outside Kenya, we ensure appropriate safeguards are implemented. These may include Standard Contractual Clauses and supplementary protection measures as required under applicable data protection laws, including the Kenya Data Protection Act (DPA) and GDPR where applicable.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

  • Encryption technologies
  • Access control measures
  • Regular security reviews and audits
  • Continuous monitoring of our systems

In the event of a data breach, we will take appropriate action and notify affected parties and the Office of the Data Protection Commissioner (ODPC) where required by law.

8. Your Rights

You have rights regarding your personal data, including the right to:

  • Access your personal information
  • Request correction or rectification of inaccurate data
  • Request deletion or erasure of your data
  • Restrict processing of your information
  • Object to certain processing activities
  • Request portability of your personal data

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal and regulatory requirements.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated through email notifications or an in-platform announcement. Continued use of Maabara Online after such notifications indicates acceptance of the updated policy.