Privacy Policy

How we collect, use, and protect your personal information

Effective Date: January 1, 2026 (Updated)

At TenderSoko (tendersoko.com), we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data in accordance with applicable privacy laws, including the European Union's General Data Protection Regulation (GDPR) and the Data Protection Act, 2019 of Kenya, as well as principles from regional frameworks across Eastern Africa.

1. Information We Collect

Personal Information: When you create an account or subscribe to our services, we may collect your name, email address, phone number, and payment details.
Usage Data: We collect data about how you interact with our website, such as IP address, browser type, access times, and pages visited.

2. How We Use Your Information

To provide and manage your access to our services
To improve our website and offerings
To communicate with you regarding updates, promotions, or customer support
To comply with legal obligations

3. Legal Basis for Processing

We process your personal data based on legal frameworks applicable in the regions we operate, including:

Consent: You have given clear consent for processing your personal data.
Contract: The processing is necessary for a contract or pre-contractual measures.
Legal Obligation: Processing necessary for compliance with a legal obligation.
Legitimate Interests: Necessary for our legitimate interests, provided it does not override your fundamental rights.

4. Compliance with Kenyan and East African Laws

We comply with Kenya's Data Protection Act, 2019, which regulates the processing of personal data to ensure that such data is handled lawfully, transparently, and securely. We also align our practices with relevant regional data protection initiatives such as the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) and East African Community recommendations.

Data subjects in Kenya and the region have the right to:

Be informed about the use of their personal data
Access and request correction or deletion of their personal data
Object to the processing of their data
Withdraw consent at any time
Report concerns to the Office of the Data Protection Commissioner (ODPC) in Kenya

5. Sharing of Information

We do not sell your personal information. We may share it with third-party service providers only to the extent necessary to deliver our services (e.g., payment processors, analytics providers), subject to confidentiality agreements and data protection contracts.

6. Payment Information Privacy

All payment transactions on TenderSoko are processed securely via third-party payment gateways. We do not store or process your credit/debit card information directly. Payment providers are compliant with industry standards such as PCI-DSS and are contractually obligated to protect your payment data.

7. Advertising and Bots

We may use third-party advertising platforms to display ads. These platforms may use cookies or similar technologies to collect anonymized user behavior data to deliver more relevant ads. We actively monitor traffic and usage patterns to detect and prevent automated bots or malicious activities. We may use CAPTCHA or similar tools to verify user authenticity and protect our platform.

8. Data Security

We use industry-standard security measures to protect your data. However, no method of transmission over the Internet is 100% secure.

9. Your Rights Under GDPR and Kenyan Law

As a data subject, you have the following rights:

The right to access your personal data
The right to rectify inaccurate or incomplete data
The right to erasure ("right to be forgotten")
The right to restrict processing
The right to data portability
The right to object to processing
The right to withdraw consent at any time
The right to lodge a complaint with a supervisory authority or ODPC

10. Cookies

We use cookies to enhance your experience on our website. You can adjust your browser settings to decline cookies if you prefer. EU users will be prompted to accept or reject cookies upon visiting the site. For more details, see our Cookie Policy.

11. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA) or Kenya, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authorities.

12. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date.

13. Contact Us

If you have any questions about this Privacy Policy or your rights under GDPR or Kenyan law, please contact us at:

Email: [email protected]