Privacy Policy

Effective date: 25 March 2026

1. Overview

Shughuli (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it in compliance with the Kenya Data Protection Act, 2019.

2. Data We Collect

Account information

Name, email address, phone number, and password hash when you create an account.

Booking data

Phone number, service requested, date, time, and any notes you provide when making a booking.

Business listing data

Business name, description, location, contact details, operating hours, and service catalogue provided by service providers.

Usage data

Pages visited, search queries, device type, and browser information collected automatically for analytics and platform improvement.

3. How We Use Your Data

To process and manage bookings between customers and service providers.
To communicate booking confirmations, updates, and reminders.
To display business listings and facilitate discovery by customers.
To improve the platform through aggregated, anonymised analytics.
To prevent fraud and enforce our Terms of Service.
To comply with legal obligations under Kenyan law.

4. Data Sharing

We do not sell your personal data. We share data only in these circumstances:

Between booking parties: your phone number is shared with the service provider (and vice versa) to fulfil a booking.
Payment processors: payment details are transmitted directly to our payment provider (e.g. M-Pesa/Safaricom) and are not stored by Shughuli.
Legal compliance: if required by Kenyan law, court order, or regulatory authority.
Service providers: hosting (Supabase/Vercel) and analytics tools that process data on our behalf under data processing agreements.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Booking records are kept for a minimum of 2 years for dispute resolution and legal compliance. You may request deletion of your account and associated data at any time (see Section 7).

6. Data Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), secure authentication, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

Access your personal data held by us.
Correct inaccurate or incomplete data.
Delete your data (subject to legal retention requirements).
Object to processing of your data for direct marketing.
Port your data in a machine-readable format.

To exercise these rights, contact us at info@shughuli.co.ke.

8. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the platform is used. You can control cookies through your browser settings.

9. Children’s Privacy

Shughuli is not intended for use by anyone under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes. The “Effective date” at the top indicates the latest revision.

11. Contact

For privacy-related enquiries, contact our Data Protection Officer at info@shughuli.co.ke.