1. Introduction
Welcome to Smart Buyer KE (accessible at https://smartbuyer.ke). We respect your privacy and are committed to protecting your personal data. This Privacy Policy details how we collect, process, store, and safeguard your information when you use our car valuation tools, and outlines your rights under the Data Protection Act, 2019 of the Republic of Kenya.
2. Information We Collect
We collect information necessary to provide and secure our vehicle valuation services. This includes:
- Google Account Information (Google OAuth): If you choose to log in or register via "Sign in with Google", we receive your Google display name, email address, profile picture URL, and unique Google ID as authorized by your Google profile settings.
- Passwordless Session Email: If you choose to sign in via our email link, we collect and store your email address.
- Usage Data: We collect transactional details of your requests (e.g. car makes/models queried, dates of valuations) associated with your account ID (UID) to enforce system usage quotas.
- Technical Logs: IP address, device specifications, browser type, and cookie identifiers.
3. Purpose and Legal Basis for Processing
We process your personal data in accordance with Section 3 of the Kenya Data Protection Act, 2019:
- Service Delivery: To authenticate your account session and assign your correct daily valuation quota.
- Consent: By using "Sign in with Google" or entering your email for passwordless links, you explicitly consent to our processing of your email and profile details.
- Security: To prevent API abuse, spam, and denial-of-service attempts.
4. Data Sharing and Protection
We do not sell, rent, lease, or share your personal data with any third parties. Your Google user data and email records are used exclusively within Smart Buyer KE. All customer data is processed using Google's secure global cloud server infrastructure, employing industry-standard encryption protocols in transit and at rest.
5. Your Rights as a Data Subject
Under Part IV of the Kenya Data Protection Act, 2019, you have the following rights:
- The right to be informed of how we use and store your personal data.
- The right to access your personal data held by us.
- The right to object to the processing of your data.
- The right to request the rectification of inaccurate or outdated information.
- The right to request the permanent deletion of your data.
6. Account and Data Deletion Policy
You have the right to request the complete deletion of your account and all associated history at any time. To execute this right, please send an email to smartbuyerke@gmail.com with the subject line "Account Deletion Request". Upon receipt of your request, we will permanently purge your user credentials, query history, and metadata from our servers within 14 business days and confirm completion.
7. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection representative:
Email: smartbuyerke@gmail.com
Location: Nairobi, Kenya.