Legal Center

Dafluma legal

Controlled draft

Data Protection & Privacy Statement

Our operational commitments under Kenyan data-protection principles.

Version
1.0
Effective
2026-08-06
Applies to
Data subjects, customers, operators, and regulators

Controlled draft

This document is versioned but is not a current published policy. Refer to its publication status in the Legal Center.

Our commitments

  • Process personal data lawfully, fairly, and transparently.
  • Collect data for explicit purposes and limit it to what is necessary.
  • Keep information accurate, appropriately retained, and protected.
  • Use privacy-aware design, access controls, audit evidence, and accountable service providers.
  • Support lawful data-subject requests without destroying records that must legally be retained.

Requests and complaints

Send requests to privacy@dafluma.com. We will verify identity, record the request, explain any lawful limitation, and respond within the period required by applicable law. You may also contact the Office of the Data Protection Commissioner.

Incidents

Suspected personal-data incidents are assessed, contained, documented, and notified to affected parties or regulators where required. Do not send passwords, OTPs, payment PINs, or sensitive evidence through an unsecured support message.

Operator: IWEBZ KENYA LTD

Platform: Dafluma

Contact: legal@dafluma.com

Address: Westlands, Nairobi, Kenya