Effective Date: January 10, 2025

We values your privacy and is committed to protecting your personal and sensitive data. This Privacy Policy outlines how DukaPlus collects, uses, and shares information when you use the app, and your rights regarding this information.

1. Information We Collect

DukaPlus may collect the following types of data:

Personal Data

• User Information: Name, email address, phone number, and other contact details.

• Business Details: Store name, business address, and tax identification numbers (optional).

Usage Data

• App Interactions: Data about your usage of the app (e.g., features accessed, pages visited).

• Device Information: Device type, operating system, unique device identifiers, and network information.

Payment Data

Transaction Information: Payment history, methods used (e.g., MPESA or cash), and amounts.

Sensitive Data

No biometric or health data is collected by DukaPlus. However, sensitive business information, such as sales data, may be stored securely.

2. How We Use Your Information

DukaPlus uses the collected information to:

• Provide, maintain, and improve the app’s features.

• Facilitate and manage business transactions.

• Generate reports, receipts, and invoices for users and their customers.

• Enhance user experience with personalized content and notifications.

• Provide customer support and resolve issues.

• Comply with legal and regulatory requirements.

3. Sharing of Information

Your data is not shared with third parties unless:

• You have explicitly consented to sharing.

• It is required to process a transaction (e.g., payment gateways like MPESA).

• It is required by law or regulatory authorities.

• It is necessary to protect our rights or resolve disputes.

4. Data Security

We employ industry-standard security measures to safeguard your data from unauthorized access, alteration, or destruction. These include:

• Encryption of sensitive data during transmission.

• Regular audits of our data storage systems.

• Secure servers and firewalls.

5. Data Retention and Deletion Policy

• Data is retained as long as necessary to fulfill the purposes outlined in this policy.

• Users may request data deletion by contacting us at ask@duka.plus.

• Upon account closure, data will be deleted within 30 days, unless required for legal purposes.

6. User Rights

You have the following rights concerning your data:

• Access and Portability: Request a copy of your personal data.

• Correction: Request corrections to inaccurate information.

• Deletion: Request the deletion of your data.

• Restriction: Restrict how your data is processed.

• Objection: Object to certain types of data processing.

• To exercise these rights, contact us at ask@duka.plus.

7. Privacy Point of Contact

If you have any inquiries, complaints, or concerns about this Privacy Policy, please contact:

• Email: ask@duka.plus.

• Phone: +254 725 30 71 31

8. Updates to this Privacy Policy

This policy may be updated from time to time to reflect changes in regulations or how we operate. Significant changes will be communicated via app notifications or email.