Privacy Policy

This Privacy Policy explains how Mzuri (mzuri.co.ke) collects, uses, and protects your personal data when you use our marketplace for buying and selling phones and tablets in Kenya. We are committed to handling your data responsibly and in line with the Kenya Data Protection Act, 2019.

1. Information we collect

We collect only the information needed to run the marketplace:

• Account details: your name, email address, phone number, and county when you register.
• Listing content: the device details, descriptions, prices, and any other text you add to your listings.
• Images: photos you upload for your listings, which are stored and served through Cloudinary, a third-party image hosting provider.
• Contact information you share: the phone number buyers use to reach you via WhatsApp or call is visible on your listings so people can contact you.
• Basic technical data: standard information your browser sends, used to keep the service working and secure.

We do not process payments and we do not collect or store any payment, M-Pesa, or card details.

2. How we use your information

• To create and manage your account.
• To publish your listings and let buyers contact you directly.
• To send service-related emails, such as account verification and important notices, using a third-party email delivery provider.
• To moderate the marketplace, review reported listings, and prevent fraud and abuse.
• To keep the platform secure and functioning correctly.

3. Cookies and local storage

We use cookies and your browser's local storage to keep you signed in, by storing authentication tokens, and to make the site work properly. For full details, see our cookie policy.

4. Sharing your information

We do not sell your personal data. We share information only as needed to run the service:

• With other users: your name, county, listing content, and the contact details on your listings are visible to people browsing the marketplace.
• With service providers: Cloudinary (image hosting) and our email delivery provider, which process data on our behalf.
• When required by law: if a lawful request is made by a competent Kenyan authority.

5. Data retention

Listings expire automatically after 30 days. We keep your account information for as long as your account is active. If you close your account or ask us to delete your data, we will remove your personal information except where we are required to keep it by law.

6. Your rights under the Kenya Data Protection Act, 2019

As a data subject in Kenya, you have the right to:

• Be informed about how your personal data is used.
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data where appropriate.
• Object to or restrict certain processing of your data.

To exercise any of these rights, email us at support@mzuri.co.ke and we will respond in line with the Act. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner.

7. Security

We take reasonable technical and organisational measures to protect your data, including securing authentication tokens. No online service can be completely secure, so we also rely on you to keep your account credentials private and to follow our safety tips.

8. Children

Mzuri is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us so we can remove it.

9. Changes to this policy

We may update this policy from time to time. We will revise the date at the top of this page when we do. Please check back periodically.

10. Contact and data requests

For any privacy question or to make a data request (access, correction, or deletion), email us at support@mzuri.co.ke or use our contact page.