Privacy Policy

1. Introduction

Welcome to ePOS Kenya ("we," "our," or "us"). We operate the ePOS Point of Sale system (the "Service") for businesses in Kenya. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

• Business Information: Business name, registration number, tax PIN
• Contact Details: Owner name, email address, phone number
• Location Data: Business address, GPS coordinates (if enabled)
• Payment Information: M-Pesa number, transaction records
• User Accounts: Employee names, roles, login credentials

2.2 Transaction Data

• Sales records and receipts
• Inventory management data
• Customer purchase history
• Payment transaction details
• KRA-compliant tax records

2.3 Technical Data

• IP addresses and browser type
• Device information and operating system
• Usage patterns and feature interactions
• Error logs and performance data

3. How We Use Your Information

• To provide and maintain our POS Service
• To process M-Pesa payments and generate receipts
• To generate KRA-compliant reports and tax calculations
• To manage inventory and stock levels
• To provide customer support and respond to inquiries
• To send important updates about the Service
• To monitor and analyze usage patterns for improvements
• To detect, prevent, and address technical issues
• To comply with Kenyan legal obligations

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

4.2 Required Disclosures

• Service Providers: We engage trusted third parties to:
  • M-Pesa payment processing (Safaricom PLC)
  • Cloud hosting and data storage
  • Email and SMS notifications
  • Analytics and monitoring tools
• Legal Requirements: We may disclose your information:
  • To comply with Kenyan laws and regulations
  • To respond to valid legal requests
  • To protect our rights, privacy, safety, or property
  • For KRA compliance and tax reporting

5. Data Security

• SSL/TLS encryption for all data transmissions
• Secure servers with firewall protection
• Regular security audits and vulnerability testing
• Access controls and authentication mechanisms
• Regular data backups and disaster recovery plans
• Employee training on data protection

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with Kenyan legal obligations (7 years for tax records)
• Resolve disputes and enforce our agreements
• Maintain business continuity for your operations

7. Your Rights

Under Kenyan data protection laws, you have the right to:

To exercise these rights, please contact us using the information below.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: