Privacy Policy

Last Updated: October 30, 2022

Giftpesa is committed to protecting your privacy.

It is your right to be informed about how Giftpesa manages your personal information. We’re providing this Privacy Policy to explain how we collect, receive, use, store, share and disclose your data through our Services. To make this policy easier to read, the Sites, our services, platforms, and Apps are collectively called the “Services.” If you have any questions about your personal data and our policies, please email [email protected]

This Privacy Policy does not apply to any Third-Party Services (as defined below), even if they are accessible through our Services. Also, please note that unless we define a term in this Privacy Policy, all capitalized terms used in this Privacy Policy have the same meanings as in our Terms of Service. So, please make sure that you have read and understand our Terms of Service.

Included In Our Policy

  • Who We Are
  • Collection And Use Of Information
  • The Ways We Use Your Information
  • Information That We Share With Third Parties
  • Your Rights
  • Your Choices
  • The Security Of Your Information
  • How Long We Keep Your Data
  • Revisions To This Privacy Policy

 

Who We Are

Giftpesa is a gift management platform that provides freedom of choice to people and corporates in gifting. Giftpesa enable people and businesses to operate efficiently by automating the entire gifting process I.e. buying, redeeming and bulk disbursements of eVouchers to multiple recipients

 Giftpesa is a product of Giftchain Africa-a limited liability company incorporated in the Republic Of Kenya.

Our registered address is: P.O. BOX 156 – 00200, Gateway Mall, 4th floor, Mombasa Road,

Nairobi, Kenya.

 

Collection And Use Of Information

Data Collected or Received from You

Our primary goals in collecting information are

  • to document know your customer information.
  • to administer your use of the Services (including your Account, if you are an Account holder),
  • to provide you with administrative notices and
  • to otherwise enable you to enjoy and easily navigate our Services.

Personally Identifiable Information. If you use our services we may collect certain information that can be used to identify you, such as your name, email address, and phone number (“PII”).

Account Information. If you create an Account to use our Services we will collect your name, phone number and email address. Optionally we may also collect your company details and or any other information to our discretion.

Information You Provide to Us When Using the Services. We will also collect any information and PII that you choose to submit via the Services, whether you hold an Account with us or not. For example, if you are a Giftpesa user, we will collect any PII that you provide when disbursing evoucher. Depending on the information you choose to submit, this information may be information that can be used to identify you, such as your name, email address, phone number or location; or it may be information that is not considered PII because it cannot be used by itself to identify you.

Information Related to Use of the Services. Our software or servers automatically record certain information about how a person uses our Services (we refer to this information as “Log Data”), including both Account holders and non-Account holders. Log Data may include information such as a user’s Internet Protocol (IP) address, URL request, browser type, operating system, the web page that a user was visiting before accessing our Services, the pages or features of our Services to which a user browsed and the time spent on those pages or features, search terms, the links on our Services that a user clicked on and other statistics. We use Log Data to administer the Services and we analyze (and may engage third parties to analyze) Log Data to improve and enhance our Services by expanding their features and functionality. We may use a person’s IP address to generate aggregate, non-identifying information about how our Services are used.

Information Sent by Your Mobile Device. We collect certain information that your mobile device sends when you use our Services, like the manufacturer, model, operating system, and version of your device, as well as information about your use of our Services. We use this information in order to debug flaws in our software, identify device profiles we need to better serve, and identify versions of our software we need to support.

The Ways We Use Your Information

Giftpesa uses your data in various ways to provide our Services to you. The use of this data depends on how you interact with our Services:

 

How you interact with Giftpesa

How Giftpesa uses your data

Why we use personal data

When we collect personal data

Visit our websites

We use your data to track how our site is performing and see how users use the site.

If you fill our a form on the website we use your data to respond to you enquiry, or deliver the services requested.

We maintain tracking data to improve our website.

To effectively respond to your requests we need some personal data.

When you visit a page on our website.

When you input data into a form on the website.

Contact support

We send your personal information to our support system. When you submit a support request we use this to respond to you, and to see what Services you use.

To help you with your enquiries we need to be able to contact you and understand what services you have access to.

We collect your personal information when you first sign up for a user account.

Create a user account

We use your personal data to allow you to log in to our Services.

If you sign up for notifications, we use your data to send you notifications about new content.

Your personal data is necessary to enable your use of our services.

We collect your user data when you fill in the user registration form.

If you sign up for notifications, we collect some contact information.

Sign up for marketing

We use your data to send you relevant marketing materials

We use your personal data to send customized and relevant messages to you

We collect your name and email when you subscribe to our email newsletters or sign up for our Services.

Participate in a user test

We use your data when you conduct a user test to improve our Services

We use you data to communicate directly with you, but do not pass this data to other user testers

We collect your contact details when you register for a user test and/or give written consent

Information That We Share With Third Parties

We will not share any PII that we have collected from or regarding you except as described below:

Information Shared with Our Services Providers. We may engage third-party services providers to work with us to administer and provide the Services. These third-party services providers have access to your PII only for the purpose of performing services on our behalf and are expressly obligated not to disclose or use your PII for any other purpose.

Information Shared with Third Parties. We may share aggregated information and non-identifying information with third parties for industry research and analysis, demographic profiling and other similar purposes.

Without limiting the foregoing, we utilize the following services, among others, to gather information about how our users engage with our Services:

Service

What is it?

What do we use it for?

Privacy Information

M-Pesa

Payment processor

To process customer payments

https://www.safaricom.co.ke/personal/m-pesa

Google Analytics

A suite of analytics tools

To analyze information about how users engage with our Services in order to improve them

www.google.com/‌policies/‌privacy/‌partners/

You can opt out of Google’s collection and processing of data generated by your use of the Services by going tohttp://tools.google.com/dlpage/gaoptout

Google G Suite

Email office software

To communicate, survey and exchange documents with our customers

https://policies.google.com/pr…

Google Firebase

Mobile development platform

To analyze our mobile apps, and send crash reports

https://firebase.google.com/su…

Google drive

Cloud storage platform

To host documents and customer contracts

https://www.gsuite/drive.com/

Gsuite

Customer support platform

Messaging and emailing with our customers and potential customers to provide Service support

www.gsuite.com

Amazon AWS

Cloud hosting and services platform

To host our Services, as well our website, as backups, monitoring

https://aws.amazon.com/privacy…

Slack

Enterprise communications application

To communicate with our staff and customers about our Services

https://slack.com/privacy-poli…

Information Disclosed in Connection with Business Transactions. Information that we collect from our users, including PII, is considered to be a business asset. Thus, if we are acquired by a third party as a result of a transaction such as a merger, acquisition or asset sale or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your PII, may be disclosed or transferred to a third party acquirer in connection with the transaction.

Information Disclosed for Our Protection and the Protection of Others. We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.

Data Protection Laws

Your consent

Processing your data is done with your explicit consent. You provide your consent by signing a contract or agreeing to a check-boxes that describe how your data will be used.

Performance of contract

Processing your data is required by a contract. Your personal data may be used to take next steps in entering into a contract. When you enter into contract, your personal data may be used to fulfil contractual obligations.

Legal obligation

Processing is necessary for compliance with a legal obligation according to Applicable Laws and Regulations.

We do need to send you certain communications regarding the Services and you will not be able to opt out of those communications – e.g., communications regarding updates to our Terms of Service or this Privacy Policy or information about billing.

If you would like to delete your account completely, contact us at [email protected] .

Modifying Your Information. If you have an Account, you can access and modify the PII associated with your Account. You can also delete your Account at any time. Editing your content or deleting your Account may alter the displayed state of the content, but will not permanently delete the content from our Services and some information may remain in archived/backup copies for our records or as otherwise required by law. If you would like your data permanently deleted contact us at [email protected] .

.

The Security Of Your Information

We take reasonable administrative, physical and electronic measures designed to protect the information that we collect from or about you (including your PII) from unauthorized access, use or disclosure. Please be aware, however, that no method of transmitting information over the Internet or storing information is completely secure. Accordingly, we cannot guarantee the absolute security of any information.

 

How Long We Keep Your Data

Deployment data

Giftpesa transactional data – including users, contacts (sms), transactional value and history,   are retained as long as the platform exists. If you wish your transactional data and history deleted entirely, contact [email protected].

User data

Transactional user data is maintained as long as the platform and user exist. If the user is deleted by the platform administrator, all their data is removed. Data may remain in offline backups indefinitely.

Customer and payment data

We will retain your billing and payment information as needed to provide you services. Even if you close your account with Giftpesa, we will still retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. However, we will identify your account in our database as “inactive” or “closed”.

Support requests

If you contact our support team – through [email protected] or the in application chat – we retain those messages indefinitely, unless you request we delete them.

Our Policy Toward Children

Our Services are not directed to children under 18 and we do not knowingly collect PII from children under 18. If we learn that we have collected PII of a child under 18 we will take steps to delete such information from our files as soon as possible.

Revisions To This Privacy Policy

Any information that is collected via our Services is covered by the Privacy Policy in effect at the time such information is collected. We may revise this Privacy Policy from time to time. If we make any material changes to this Privacy Policy, we’ll notify you of those changes by posting them on the Services or by sending you an email or other notification, and we’ll update the “Last Updated Date” above to indicate when those changes will become effective.

Questions?

Please contact us at [email protected]  if you have any questions about our Privacy Policy