Privacy Policy

This privacy policy describes how SasaPay protects the personal data it processes, why and how we collect and use your personal data and how you can exercise your rights in relation to the processing of your personal data. This privacy policy should be read together with the Terms and Conditions of Use for other products and services.

This statement applies to all customers, suppliers, agents, merchants, dealers and all visitors frequenting any of SasaPay services.

Definitions

"You", "Your" means: customer

"Personal data" or "personal information" means: Information about you or information that identifies you as a unique individual, such as your name/s and surname combined with your physical address, contact details and/or passport/identity number.

"Processing" collectively means handling, collecting, using, altering, merging, linking, organizing, disseminating, storing, protecting, retrieving, disclosing, erasing, archiving, destroying, or disposing of your personal information.

"Sensitive personal information" includes data revealing your race, health status, ethnic social origin, conscience, belief, genetic data, biometric data, property details, marital status, family details including details of your children, parents, spouse or spouses, sex or sexual orientation.

"SasaPay", "we" or "us", "our" and "ours" means Paylon Limited

Collection of Personal Data

SasaPay will only collect personal data about you in so far as is necessary to achieve the purposes set out in this privacy statement. We collect your personal information with your knowledge and consent with exception to cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.

Personal Information Collected

  • Identification Information: Name, Date of Birth, National Identity Card/Passport details
  • Images: Facial images, selfies for authentication purposes and in compliance with legal and regulatory requirements
  • Contact Details: Phone number or email address
  • Biometric Data: Fingerprints and facial images for authentication purposes and in compliance with legal and regulatory requirements
  • Location Information: To enable us to provide location-based services and aid us in fraudulent activity detection
  • Device Information: Information about the device you use to access the app, including device type, operating system, IP address, session duration, and unique device identifiers

When Do We Collect Information?

We collect information from you when you:

  • Make an application, buy or use any of our products and/or services
  • Use any of our products and/or services on a mobile or other device
  • Ask SasaPay for more information about a product or service
  • Visit or access SasaPay premises
  • Attend an event sponsored by SasaPay
  • Visit, access or use any of our online platforms/websites
  • Subscribe to any of our online services, SMS, email or social media platforms
  • Respond to or participate in surveys, marketing promotions, or special offers

How Do We Use Your Information?

  • Responding to any of your queries or concerns
  • Verifying your identity information through publicly available and/or restricted government databases
  • Carrying out credit checks and credit scoring
  • To comply with any legal, governmental or regulatory requirements
  • In business practices including quality control, training and ensuring effective systems operations
  • To protect our network including managing the volume of calls, texts and other use
  • To understand how you use our network, products and services for purposes of developing or improving products and services
  • Preventing and detecting fraud or other crimes and for debt recovery
  • Provide aggregated data to third parties for research and scientific purposes

How Do We Protect Your Information?

We use vulnerability scanning and/or scanning to PCI standards. We use regular Malware Scanning. Your personal information is contained behind secured networks and is only accessible by a limited number of people who have special access rights to such systems and are required to keep the information confidential.

In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology. We implement a variety of security measures when a user enters, submits or accesses their information to maintain the safety of your personal information.

Retention of Personal Data

SasaPay will retain your personal data only for as long as is necessary to achieve the purpose for which they were collected. We may retain your personal data and/or information for a period of up to seven (7) years or as may be required by law.

Your Rights

You have the right to:

  • Be informed that we are collecting personal data about you
  • Request access to your personal information that we have on record
  • Request SasaPay to rectify any of your personal data that is incorrect or incomplete
  • Object to and withdraw your consent to processing of your personal data
  • Request the erasure of your personal data
  • Request the restriction of the processing of your personal data
  • Request portability of your personal data

International Data Transfers

From time to time we may need to transfer your personal information outside the Republic of Kenya. Where we send your information outside Kenya, we will make sure that your information is properly protected in accordance with the applicable Data Protection Laws.

Amendments to This Statement

SasaPay reserves the right to amend or modify this privacy statement from time to time and your continued use of our products and services constitutes your agreement to be bound by the terms of any such amendment or variation.

Contacting Us

If there are any questions regarding this privacy policy, you may contact us using the information below:

Email: care@sasapay.co.ke

Phone: +254 797 000 333