header

iSOKO PRIVACY POLICY

iSOKO Kenya Privacy Policy


Last Updated: 3-4-2025

1. Introduction

This Privacy Policy describes how the iSOKO platform, hosted by Trademark Africa (TMA), collects, uses, stores, and protects your personal and business information.

We are committed to protecting your privacy and ensuring compliance with the Kenya Data Protection Act (2019) and other applicable regional and international data protection standards.

“Personal Data” refers to any information that enables us to identify you directly or indirectly, such as your name, identification number, location data, online identifiers, or factors specific to your social, economic, or business identity.

Each time you use iSOKO, the current version of this policy applies. We may update this Privacy Policy from time to time, and any changes will be posted on the platform. If you disagree with our practices, you should discontinue use of the platform. For questions or concerns, please contact us at:

📧 Email: support.isoko@isoko.africa
📞 Phone: +254 203 927 000

2. Data Collection

We collect personal and business information through web, mobile (Android), and USSD channels. Data may be collected when you:

  1. Register an account on iSOKO (self-registration or through KNCCI staff, trade associations, or enumerators).

  2. Complete onboarding to capture essential details for your business profile.

  3. List products and services on the marketplace.

  4. Submit orders or trade information, including quantities, transactions, and payments.

  5. Participate in trainings, workshops, and market linkages supported through iSOKO.

  6. Update your profile or shop information such as contact details, product photos, or business records.

  7. Provide location data (GPS coordinates) for logistics or mapping of market points.

  8. Engage with customer support via email, chat, or phone.

  9. Participate in marketing campaigns, referral programs (e.g., promo code campaigns), or surveys.

Types of information collected may include:

  1. Personal details: Name, gender, date of birth, contact information.

  2. Business details: Trade sector, products/services offered, certifications.

  3. Transactional data: Orders, invoices, payment methods, logistics arrangements.

  4. Activity records: Platform usage, training participation, trade volumes.

  5. Device and technical data: IP address, device type, browser, geolocation.

  6. Communication data: Messages, reviews, inquiries, or complaints.

3. Use of Data

We use your data for:

  1. Account creation & management: To set up and maintain your account.

  2. Marketplace services: To facilitate the listing, buying, and selling of goods and services.

  3. Trade information delivery: To provide real-time market prices, opportunities, and regulatory updates.

  4. Business support services: To connect you with logistics providers, financial services, training, associations, and other business support services.

  5. Monitoring & evaluation: To measure engagement, trade volumes, and program impact.

  6. Notifications & alerts: To inform you about orders, deliveries, and new features.

  7. Platform improvement: To analyze user behavior, improve design, and enhance services.

  8. Legal compliance: To fulfill obligations under Kenyan law (e.g., taxation, data protection, anti-fraud).

  9. Marketing & promotions: To share offers, referral incentives, and campaigns (with opt-out option).

4. Data Sharing and Disclosure

We do not sell your personal data. Information may only be shared under the following circumstances:

  1. With Trade Associations: To facilitate onboarding, support, training, and trade promotion for their members.

  2. With Service Providers: Such as logistics, financial institutions, and technology partners to deliver services.

  3. With Government Bodies: Aggregate or anonymized data may be shared with regulators for policy-making or compliance.

  4. With Donors and Partners (e.g., TMA): For program monitoring and impact evaluation (in aggregate form).

  5. With Legal Authorities: When required by law or court order.

  6. With Consent: When you explicitly authorize sharing for specific purposes.

5. Data Security and Protection

We apply robust security measures, including:

  1. Encryption: SSL/TLS protocols for data in transit; encryption for sensitive data at rest.

  2. Authentication: Secure login credentials and two-factor authentication (OTP).

  3. Role-Based Access Control (RBAC): Access limited based on user roles (admin, seller, buyer, etc.).

  4. Audit Trails: Comprehensive logs of all user actions and data changes.

  5. Data Backups: Regular and automated secure backups.

  6. System Monitoring: Continuous monitoring to detect and mitigate threats.

6. Data Privacy and Compliance

iSOKO ensures:

  1. Consent Management: Users give explicit consent when registering and can withdraw consent for marketing anytime.

  2. Anonymization: Personal data may be anonymized for reporting and research purposes.

  3. Cross-border compliance: For users trading outside Kenya, data handling will align with applicable cross-border trade and privacy standards.

7. Your Rights

In line with Kenyan law, you have the right to:

  1. Access: Request a copy of the personal data we hold about you.
  2. Correction: Update or correct inaccurate or outdated information.
  3. Deletion: Request deletion of your data (subject to legal retention requirements).
  4. Restriction: Limit how we process your data in certain circumstances.
  5. Objection: Opt out of direct marketing or automated decision-making.
  6. Portability: Request your data in a portable format where applicable.

8. Account Deletion

  1. User-Initiated Deletion
    Users may delete their iSOKO account at any time through the available platform options or by submitting a written request to the iSOKO support team through this link: https://ke.isoko.africa/auth/delete-account

  2. Effect of Account Deletion
    Upon receiving a valid deletion request, iSOKO will deactivate the user’s account and begin the data deletion process, which will take up to 30 days. In that period certain information may be to comply with legal, regulatory, or legitimate business obligations.

  3. Outstanding Transactions
    iSOKO may decline or delay account deletion if the user has pending transactions, unresolved disputes, or unpaid obligations. The account will only be deleted once these issues are fully resolved.

  4. Irreversibility
    Account deletion is permanent. Once an account is deleted, users will lose access to their profile, listings, messages, and any data associated with the account. Deleted accounts cannot be restored.

  5. Platform-Initiated Deletion
    iSOKO reserves the right to delete or suspend accounts that violate these Terms and Conditions, are fraudulent, are inactive for extended periods, or pose a security or legal risk to the platform or its users.

9. Cookies and Tracking
 

  • We use cookies to improve platform performance, personalize user experience, and analyze traffic.

  • Users can disable cookies in browser settings, though this may limit certain features.

10. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on the platform with the revised date. Continued use of iSOKO after updates means you accept the revised policy.

11. Contact Information

For questions or concerns regarding this Privacy Policy, please contact:

 iSOKO Team
📧 Email: support@isoko.africa
📞 Phone: +254 203 927 000