Garaji Network Privacy Policy

1. Introduction

This Privacy Policy explains how Garaji Systems ("Garaji", "we", "us") collects, uses, shares, and protects personal data when you register as a Garaji Network partner, use the provider hub, or interact with our partner marketing sites (including partner.garajisystems.co.ke).

This policy applies specifically to Garaji Network partner onboarding and operations. Other Garaji products (e.g. Garage OS for workshop management) may be covered by additional notices when you activate them.

By registering on Garaji Network, you acknowledge this Privacy Policy. Where we rely on consent (e.g. promotional emails), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

2. Data controller

Garaji Systems is the data controller for partner personal data described in this policy.

Privacy enquiries: privacy@garajisystems.co.ke

Legal enquiries: legal@garajisystems.co.ke

3. Data we collect

4. How we use your data

• Create and manage your Garaji Network listing and provider account
• Verify your phone number and identity
• Match your business to nearby discovery and lead requests when your area is live
• Send operational SMS (OTP codes, lead alerts) and service emails
• Send promotional emails and partner updates where you have consented — until you unsubscribe
• Improve the Platform, prevent fraud, and comply with law
• Generate aggregated, non-identifying statistics about partner supply by city

5. Legal bases for processing

Under the Kenya Data Protection Act, 2019, we process personal data based on contract performance (providing Garaji Network), legal obligation, legitimate interests (security, fraud prevention, product improvement), and consent where required (for example, promotional marketing).

6. How we share data

• With drivers and customers — limited listing information (business name, area, category, verification badge) when discovery is open in your city
• With service providers — SMS gateways, email delivery, hosting, analytics (under data-processing agreements)
• With insurers or fleet partners — only where you participate in integrated programmes and we inform you
• With authorities — when required by law or to protect rights and safety
• We do not sell your personal data.

7. Retention

We retain partner data while your listing is active and for a reasonable period afterward for legal, tax, and dispute-resolution purposes (typically up to seven years for business records unless a longer period is required by law).

OTP and short-lived verification tokens are deleted or expire automatically.

You may request deletion subject to exceptions (e.g. ongoing disputes or legal holds).

8. Security

We use encryption in transit, access controls, and monitoring appropriate to the sensitivity of partner data. No method of transmission over the Internet is 100% secure; we encourage strong device security and prompt reporting of suspected unauthorised access.

9. Your rights

To exercise rights, contact privacy@garajisystems.co.ke. We respond within timelines required by the Kenya Data Protection Act, 2019.

• Access, correction, and deletion of your personal data
• Object to or restrict certain processing where Kenyan law allows
• Withdraw consent for promotional emails (unsubscribe link or email us)
• Lodge a complaint with the Office of the Data Protection Commissioner (Kenya)

10. International transfers

Some of our hosting, SMS, email, or analytics providers may process data outside Kenya. Where that happens, we use contractual and technical safeguards consistent with the Kenya Data Protection Act, 2019.

11. Children

Garaji Network is for business users aged 18 and over. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy. The "Last updated" date will change when we do. Material changes may be communicated by email or notice on the Platform.

13. Contact

Privacy: privacy@garajisystems.co.ke

Legal: legal@garajisystems.co.ke

Garaji Systems — Garaji Network, Nairobi, Kenya.