Back to Login

TAMUWA LIMITED PRIVACY POLICY (Client Dashboard Edition)

Effective Date: February 2026 | Version: 2.0

Section 1: Introduction

This Privacy Policy outlines how Tamuwa Limited ("we", "us", or "our") processes personal data in accordance with the Data Protection Act, 2019 (Kenya). This policy applies specifically to the Client Dashboard and related services.

Section 2: Who We Are

Tamuwa Limited acts as a Data Controller for the Dashboard. We are responsible for determining the purposes and means of processing your personal data.

Section 3: Data We Collect

We collect and process the following categories of personal data:

  • Identity Data: Names and titles
  • Contact Data: Business email addresses
  • Technical Data: Strictly Necessary Cookies (including accessToken) and System Logs

Section 4: Lawful Basis

We process your personal data based on the following lawful grounds:

  • Performance of Contract
  • Legitimate Interest
  • Legal Obligation

Section 5: Sharing

We may share your personal data with:

  • Service Providers: AWS (for hosting and infrastructure)
  • Auditors/Verifiers: Third-party verification entities
  • Regulatory Authorities: Office of the Data Protection Commissioner (ODPC) and Kenya Revenue Authority (KRA) when required by law

Section 6: International Transfers

Your data may be stored on AWS servers located outside Kenya. However, all data transfers are protected by appropriate encryption and security measures to ensure your data remains secure.

Section 7: Data Security

We implement robust security measures to protect your personal data, including:

  • AES-256 encryption for data at rest
  • TLS (Transport Layer Security) for data in transit
  • Role-Based Access Control (RBAC)
  • JWT (JSON Web Token) authentication

Section 8: User Rights

Under the Data Protection Act, 2019, you have the following rights:

  • Right to access your personal data
  • Right to rectify inaccurate or incomplete data
  • Right to erase your personal data (right to be forgotten)
  • Right to object to processing of your personal data

To exercise these rights, please contact us using the details provided in Section 9.

Section 9: Contact

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us at:

Email: privacy@tamuwa.com