Privacy Policy

PRIVACY POLICY & DATA PROTECTION NOTICE

Last Updated: September 20, 2026

At Kencart Classifieds ("Kencart", "we", "us", or "our"), accessible from https://www.kencart.com, protecting the privacy and personal data of our users is a primary commitment. This Privacy Policy outlines how we collect, process, store, and protect your personal information in accordance with the Data Protection Act, 2019 of the Republic of Kenya, regulated by the Office of the Data Protection Commissioner (ODPC).

  1. Consent and Lawful Basis for Processing

By accessing, registering, or placing listings on Kencart Classifieds, you acknowledge that you have read this policy and consent to the collection, storage, and processing of your personal data as described herein. Where required, we rely on your explicit consent, contractual necessity (to facilitate classified transactions), or legitimate interest to process your information. You may withdraw your consent at any time by contacting us.

  1. Information We Collect

We collect personal information that you voluntarily provide to us when registering for an account, posting a listing, or communicating with us or other users:

  • Account & Contact Data: Full name, phone number (e.g., for M-Pesa, WhatsApp, or direct calling), physical city/location, and email address.

  • Listing Content: Item photos, descriptions, transaction preferences, and verification documentation if requested.

  • Communications & Technical Data: Messages sent through our platform, log files, IP addresses, browser specs, device identifiers, and timestamps.

  1. Purpose & How We Use Your Information

We use your personal information strictly for clear, legitimate purposes:

  1. Platform Operation: To register your account, manage listings, and enable communication between buyers and sellers.

  2. Security & Fraud Prevention: To identify fraudulent listings, prevent advance-fee/M-Pesa scams, and safeguard users under Kenyan law.

  3. Customer Support & Communications: To respond to direct inquiries, issue security alerts, and send account updates.

  4. Legal Compliance: To cooperate with law enforcement agencies or regulatory bodies (such as the ODPC) when legally compelled.

  5. Log Files, Cookies, and Third-Party Trackers

Kencart Classifieds follows standard digital procedures:

  • Log Files: We record IP addresses, browser types, Internet Service Providers (ISPs), date/time stamps, and exit pages for network administration and system monitoring.

  • Cookies: We use cookies to remember user preferences and optimize browsing experience.

  • Third-Party Advertising: We may partner with third-party networks (such as Google AdSense) that use cookies/web beacons to serve ads based on user visits. Users can manage or disable cookies via their browser settings.

  1. Data Security and Breach Notification

We implement appropriate technical and organizational measures to prevent unauthorized access, loss, or alteration of personal data. In the event of a security breach involving your personal information, we will notify the ODPC within 72 hours as mandated by law, and notify affected users within a reasonable timeframe where there is a high risk to their rights and privacy.

  1. International Data Transfers

Where personal data is stored on remote cloud servers located outside Kenya, we ensure that appropriate safeguards and adequate data protection standards are maintained in compliance with Section 48 of the Data Protection Act, 2019.

  1. Your Legal Data Rights in Kenya

Under the Data Protection Act, 2019, you have the following rights regarding your personal data:

  • Right to Information & Access: You have the right to be informed about how your data is collected and to request a copy of your personal data.

  • Right to Rectification: You may request that we correct inaccurate or incomplete personal information.

  • Right to Erasure (Right to be Forgotten): You may request the deletion or destruction of your personal data where there is no legal requirement for us to retain it.

  • Right to Object & Restrict Processing: You may object to or restrict the processing of your data under specific circumstances.

To exercise any of these rights, please contact our Data Protection Officer (DPO) at privacy@kencart.com. We will respond to valid requests within 14 days.

  1. Protection of Children’s Personal Data

Kencart Classifieds does not knowingly collect personal information from individuals under the age of eighteen (18) years without verifiable parental or legal guardian consent. If you believe a minor has provided us with personal data without guardian authorization, please notify us immediately, and we will promptly delete the account and associated records.

  1. Contact Information & Data Protection Authority

If you have any questions or requests regarding your privacy, please contact:

  • Kencart Data Protection Office: admin@kencart.com

  • Regulatory Body: You also reserve the right to submit inquiries or complaints to the Office of the Data Protection Commissioner (ODPC) at info@odpc.go.ke.