Privacy & Cookie Policy
Last Updated:
1. Introduction
This Privacy & Cookie Policy explains how RicC Mtandao ("Company", "we", "our", or "us") collects, uses, stores, protects, and discloses personal information when you use our websites, applications, software platforms, APIs, and services (collectively, the "Services"). We are the Data Controller in respect of your personal data. Please read these Privacy & Cookie Policy carefully and ensure that you understand our practices regarding your personal data and how it will be treated. Your acceptance of this Privacy & Cookie Policy is deemed to occur upon your first use of the Services. If you do not accept and agree with this Privacy & Cookie Policy, you must stop using the Services.
2. Definitions and Interpretation
In the Policy the following terms shall have the following meanings:
"Account" means an account required to access and/or use certain areas and features of the Services;
"Cookie" means a small text file stored on your computer or device when you access our Services. Details of the Cookies used by the Services are set out in Part 14, below;
"Data Controller" is a person or entity that collects and determines how your personal data will be used;
"Data Processor" is the entity that carries out the processing of data on behalf of the data controller;
"Data Subject" refers to any individual person who can be identified, directly or indirectly, via an identifier/personal data;
"Data Protection Act (2019)" is a legal framework which governs collection, processing, storage, and sharing of personal information;
"Office of the Data Protection Commissioner" is mandated to regulate the processing of personal data;
3. What Are My Rights?
Under Data Protection Act (2019), you have the following rights, which we will always work to uphold:
(a) The right to be informed of the use to which your personal data is to be put. This Privacy & Cookie Policy should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in Part 18;
(b) The right to access your personal data in custody of the Data Controller or Data Processor;
(c) The right to object to the processing of all or part of your personal data;
(d) The right to correction of false or misleading data; and
(e) The right to deletion of false or misleading data about you - the Data Subject;
Further information about your rights can also be obtained from the Office of the Data Protection Commissioner. If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner. We would, however, appreciate the chance to deal with your concerns before you approach the regulator so please contact us in the first instances.
4. What Data Do We Collect?
Depending upon your use of the Services, we may collect some or all the following personal and non-personal data (please see Part 14 on our use of Cookies):
4.1 Information You Provide
4.1.1 Name
4.1.2 Email address
4.1.3 Phone number
4.1.4 Company name
4.1.5 Physical address
4.1.6 Billing information
4.1.7 User profile information
4.1.8 Customer support communications
4.2 Information Generated Through Use
4.2.1 Login information
4.2.2 Activity logs
4.2.3 Platform usage data
4.2.4 Transaction records
4.2.5 Property listings
4.2.6 Restaurant menus
4.2.7 Task postings
4.2.8 Booking information
4.3 Automatically Collected Information
4.3.1 IP address
4.3.2 Browser type
4.3.3 Device identifiers
4.3.4 Operating system
4.3.5 Referral URLs
4.3.6 Usage analytics
5. How Do You Use My Personal Data?
We use personal information to:
5.1 Supplying our services to you. Your personal details are required in order for us to enter into a contract with you
5.2 Personalizing and tailoring our services to you
5.3 Process transactions
5.4 Analyzing your use of the Services and gathering feedback to enable us to continuously improve the Services and your user experience
5.5 Respond to support requests
5.6 Detect fraud and abuse
5.7 Supplying you with information by email or post that you have opted-in to (you may unsubscribe or opt-out at any time by contacting us)
5.8 Comply with legal obligations
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email, telephone or post with information, news and offers on our products and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the Data Protection Act (2019), and you will always have the opportunity to opt-out.
Third Parties whose content appears on our Services may use third-party Cookies, as detailed in Part 14. Please refer to Part 14 for more information on controlling cookies. Please note that we do not control the activities of such third parties, nor the data they collect and use themselves, and we advise you to check the privacy policies of any such third parties.
6. Legal Basis for Processing
Where applicable under data protection laws, processing may be based on:
6.1 User consent
6.2 Contract performance
6.3 Legal obligations
6.4 Legitimate business interests
6.5 Protection of vital interests
7. Who Do You Share My Personal Data With?
We may sometimes contract with the following third parties to supply products and services to you on our behalf:
7.1 Service Providers
7.1.1 Cloud hosting providers
7.1.2 Payment processors
7.1.3 Email providers
7.1.4 SMS providers
7.1.5 Analytics providers
7.1.6 Legal Requirements
7.2 In some limited circumstances, we may disclose information when required to:
7.2.1 Comply with laws
7.2.2 Respond to court orders
7.2.3 Protect rights and safety
7.2.4 Prevent fraud
7.2.5 Business Transfers
Information may be transferred in connection with mergers, acquisitions, or asset sales.
We do not sell personal information to third parties.
8. How Long Will You Keep My Personal Data?
8.1 We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests. When personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable laws, including the Kenya Data Protection Act, 2019. Users may request deletion of their personal data subject to any legal or regulatory retention requirements.
8.2 Retention periods vary depending on data type and legal requirements. Typically for system logs, we retain for up to 12 months.
9. Data Security
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
We implement reasonable technical and organizational measures including:
9.1 Encryption
9.2 Secure authentication
9.3 Access controls
9.4 Security monitoring
9.5 Regular software updates
10. How And Where Do You Store Or Transfer My Personal Data?
10.1 Your information may be processed and stored in countries outside Kenya.
10.2 Where required, we implement adequate safeguards to protect transferred data.
11. Your Privacy Rights
In addition to your rights under Data Protection Act (2019), set out in Part 3, you may:
11.1 Access personal data
11.2 Correct inaccurate data
11.3 Delete personal data
11.4 Restrict processing
11.5 Object to processing
11.6 Data portability
11.7 Withdraw consent
Requests may be submitted using the contact information below.
12. Can I Withhold Information?
You may access part of our Services without providing any personal data at all. However, to use all features and functions available on our Services you may be required to submit or allow for the collection of certain data.
You may restrict our use of Cookies. For more information, see Part 14.
13. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a "subject access request".
All subject access requests should be made in writing and sent to the email in Part 18.
There is not normally any charge for a subject access request. If your request is 'manifestly unfounded or excessive' (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
Cookie Policy
14. How Do You Use Cookies?
Our Services may store and access certain first-party Cookies on your computer or device. First-party Cookies are those stored by us, types are:
14.1 Essential Cookies
Required for:
14.1.1 Authentication
14.1.2 Security
14.1.3 Session management
14.1.4 Core platform functionality
14.2Performance Cookies
Used to:
14.2.1 Measure traffic
14.2.2 Analyze usage patterns
14.2.3 Improve performance
14.3 Functional Cookies
Used to:
14.3.1 Remember preferences
14.3.2 Save settings
14.3.3 Personalize experiences
14.4 Analytics Cookies
Used to understand:
14.4.1 Visitor behavior
14.4.2 Feature usage
14.4.3 Platform effectiveness
14.5 Marketing Cookies
14.5.1 Where applicable, these help measure advertising performance and personalize marketing communications.
By using our Services you may also receive certain third-party Cookies on your computer or device. Third-party Cookies are those stored by other service providers other than us. Please note that third parties (including, for example advertising networks and providers of external services) may use Cookies over which we have no control. We suggest you check the third-party websites for more information about their cookies and how to manage them.
15. Managing Cookies
Users can:
15.1 Delete cookies
15.2 Block cookies
15.3 Configure browser settings
Disabling certain cookies may affect platform functionality.
16. Children's Privacy
Our Services are not directed toward children under 18 years of age (or the minimum age required by local law).
We do not knowingly collect personal information from children.
17. Changes to This Policy
We may update this Privacy & Cookie Policy periodically. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Changes become effective upon publication. We recommend that you check this page regularly to keep up-to-date.
18. How Do I Contact You?
For inquiries about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:
Company: RicC Mtandao
Email: feedback@suzie.co.ke
Address: Limuru road, Kiambu, Kenya
Phone: +25470700___0