Dafluma legal
Controlled draft
Data Protection & Privacy Statement
Our operational commitments under Kenyan data-protection principles.
- Version
- 1.0
- Effective
- 2026-08-06
- Applies to
- Data subjects, customers, operators, and regulators
Controlled draft
This document is versioned but is not a current published policy. Refer to its publication status in the Legal Center.
Our commitments
- Process personal data lawfully, fairly, and transparently.
- Collect data for explicit purposes and limit it to what is necessary.
- Keep information accurate, appropriately retained, and protected.
- Use privacy-aware design, access controls, audit evidence, and accountable service providers.
- Support lawful data-subject requests without destroying records that must legally be retained.
Requests and complaints
Send requests to privacy@dafluma.com. We will verify identity, record the request, explain any lawful limitation, and respond within the period required by applicable law. You may also contact the Office of the Data Protection Commissioner.
Incidents
Suspected personal-data incidents are assessed, contained, documented, and notified to affected parties or regulators where required. Do not send passwords, OTPs, payment PINs, or sensitive evidence through an unsecured support message.