1. Introduction

Tazamaji ("we," "our," or "us") is committed to protecting your privacy and complying with the Kenya Data Protection Act, 2019 (the "Act"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our warehouse and inventory management platform, website, and mobile applications (collectively, the "Service").

We are registered with the Office of the Data Protection Commissioner (ODPC) as a Data Controller and Data Processor in accordance with Section 18 of the Act.

2. Who We Are (Data Controller)

Where we process personal data on behalf of our clients (e.g., their employee or customer data), we act as a Data Processor. Where we determine the purposes and means of processing (e.g., for our own marketing or website analytics), we act as a Data Controller.

3. Information We Collect

3.1 Personal Data

We may collect the following categories of personal data:

• Identity Information: Full name, username, title
• Contact Information: Email address, phone number, business address
• Business Information: Company name, KRA PIN, business registration number, warehouse locations
• Account Information: Login credentials, role/permissions, access logs
• Financial Information: Billing details, payment method information
• Technical Data: IP address, browser type, device information, operating system

3.2 Operational Data

• Inventory Data: Product information, stock levels, warehouse locations, movement history
• Scan Data: QR code and barcode scan records, timestamps, user identification
• Usage Data: Log files, pages visited, features used, time spent

3.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data (such as biometric data, health information, religious beliefs, or political opinions). If you choose to store such data in our systems, you are solely responsible for establishing a lawful basis for processing and implementing appropriate safeguards.

4. Legal Basis for Processing

Under Section 30 of the Kenya Data Protection Act, 2019, we process personal data only where we have a lawful basis, including:

• Consent: You have given explicit consent for specific purposes
• Contractual Necessity: Processing is necessary for a contract with you
• Legal Obligation: Processing is necessary to comply with a legal obligation
• Legitimate Interests: Processing is necessary for our legitimate business interests

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data as required by Section 43 of the Data Protection Act:

6. Your Rights Under Kenyan Law

Under Sections 26-29 of the Kenya Data Protection Act, 2019, you have the following rights:

• Right to be informed: About how your data is collected and used
• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate information
• Right to erasure: Request deletion of your information, subject to legal limitations
• Right to data portability: Request transfer of your information
• Right to object: Object to processing based on legitimate interests
• Right to lodge a complaint: With the Office of the Data Protection Commissioner

7. Contact Us

Tazamaji Inc. Data Protection Officer: John Mwangi
Email: dpo@Tazamaji.com
Phone: +254 (0) 20 123 4567
Address: 123 Warehouse District, Westlands, Nairobi, Kenya
P.O. Box 12345-00100, Nairobi

8. Complaints to the ODPC

Office of the Data Protection Commissioner (ODPC) Website: www.odpc.go.ke
Email: complaints@odpc.go.ke
Phone: 020 7801800
Address: P.O. Box 12345-00100, Nairobi