Privacy Policy

PRIVACY POLICY & DATA PROTECTION NOTICE

Last Updated: September 20, 2026

1. Data Controller & Operating Entity

At Kencart Classifieds ("Kencart", "we", "us", or "our"), accessible from https://www.kencart.com, protecting the privacy and personal data of our users is a primary commitment.

This website is owned, operated, and maintained remotely as a cross-border digital service by Zimcart International Private Limited, a company registered in Zimbabwe ("Company"), acting as the Data Controller.

This Privacy Policy outlines how we collect, process, store, and protect your personal information in accordance with the Data Protection Act, 2019 of the Republic of Kenya, regulated by the Office of the Data Protection Commissioner (ODPC).

2. Consent and Lawful Basis for Processing

By accessing, registering, or placing listings on Kencart Classifieds, you acknowledge that you have read this policy and consent to the collection, storage, and processing of your personal data by Zimcart International Private Limited as described herein.

Where required, we rely on your explicit consent, contractual necessity (to facilitate classified transactions between users), or legitimate interest (such as platform security and fraud prevention) to process your information. You may withdraw your consent at any time by contacting us.

3. Information We Collect

We collect personal information that you voluntarily provide to us when registering for an account, posting a listing, or communicating with us or other users:

  • Account & Contact Data: Full name, phone number (e.g., for direct calling, WhatsApp, or mobile communication), physical city/location, and email address.

  • Listing Content: Item photos, descriptions, seller preferences, and verification documentation if requested.

  • Communications & Technical Data: Messages sent through our platform, log files, IP addresses, browser specifications, device identifiers, and timestamps.

4. Purpose & How We Use Your Information

We use your personal information strictly for legitimate digital marketplace operations:

  • Platform Operation: To register your account, manage listings, and enable direct communication between buyers and sellers.

  • Security & Fraud Prevention: To identify fraudulent listings, prevent advance-fee or fraudulent mobile payment scams, and safeguard users.

  • Customer Support & Communications: To respond to direct inquiries, issue security alerts, and send administrative updates.

  • Legal Compliance: To cooperate with law enforcement agencies or regulatory bodies when legally compelled by valid process.

5. Log Files, Cookies, and Third-Party Trackers

Kencart Classifieds follows standard digital procedures:

  • Log Files: We record IP addresses, browser types, Internet Service Providers (ISPs), date/time stamps, and exit pages for network administration, analytical purposes, and system monitoring.

  • Cookies: We use cookies to remember user preferences and optimize browsing experiences.

  • Third-Party Advertising: We may partner with third-party networks (such as Google AdSense) that use cookies or web beacons to serve ads based on user visits. Users can manage or disable cookies via their browser settings.

6. International Data Transfers & Cross-Border Processing

As Kencart Classifieds is operated by Zimcart International Private Limited (Zimbabwe) without a physical office or server infrastructure in Kenya, your personal data will be processed and stored on secure cloud servers outside Kenya.

In accordance with Section 48 of the Kenya Data Protection Act, 2019, we ensure that appropriate safeguards, technical measures, and adequate data protection standards are maintained for all cross-border data transfers.

7. Data Security and Breach Notification

We implement appropriate technical and organizational measures to prevent unauthorized access, loss, alteration, or disclosure of personal data. In the event of a security breach involving your personal information that poses a high risk to your rights and privacy, we will notify the ODPC within 72 hours as mandated by law, and notify affected users within a reasonable timeframe.

8. Your Legal Data Rights in Kenya

Under the Data Protection Act, 2019, users residing in Kenya have the following rights regarding their personal data:

  • Right to Information & Access: You have the right to be informed about how your data is collected and to request a copy of your personal data.

  • Right to Rectification: You may request that we correct inaccurate, incomplete, or outdated personal information.

  • Right to Erasure (Right to be Forgotten): You may request the deletion or destruction of your personal data where there is no statutory requirement for us to retain it.

  • Right to Object & Restrict Processing: You may object to or restrict the processing of your personal data under specific circumstances.

To exercise any of these rights, please contact our Data Protection Officer (DPO) at privacy@kencart.com. We will process and respond to valid requests within 14 days.

9. Protection of Children’s Personal Data

Kencart Classifieds does not knowingly collect personal information from individuals under the age of eighteen (18) years without verifiable parental or legal guardian consent. If you believe a minor has provided us with personal data without legal authorization, please notify us immediately, and we will promptly delete the account and associated records.

10. Contact Information & Regulatory Authority

For any questions, requests, or privacy concerns regarding your data handled by Zimcart International Private Limited, please contact:

  • Operating Entity: Zimcart International Private Limited (Zimbabwe)

  • Email: admin@kencart.com

Regulatory Body (Kenya):

You also retain the right to submit inquiries or complaints to the Office of the Data Protection Commissioner (ODPC) at info@odpc.go.ke