Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains how Mkufunzi ICT Solutions Ltd ("Mkufunzi POS", "we", "us") collects, uses, and protects personal data when you use our website and business management platform. We process personal data in line with Kenya's Data Protection Act, 2019.

1. Who we are

Mkufunzi ICT Solutions Ltd is a company based in Nairobi, Kenya, and is the data controller for personal data processed through our public website. For business data you enter into the platform, you are the controller and we act as your processor under your subscription agreement.

2. Data we collect

• Account and business details you provide when registering (name, business name, email, phone, location).
• Operational data you enter into the platform (sales, inventory, customers, staff, payroll, and tax records).
• Payment information processed through our payment partners; we do not store full card details.
• Usage and device data such as log records, IP address, browser type, and pages visited, used to keep the service secure and reliable.
• Communications you send us, including WhatsApp messages to our published number.

3. How we use your data

• To provide, operate, and support the platform and your account.
• To process subscriptions and payments.
• To send service notifications and respond to support requests.
• To improve reliability, security, and product features.
• To meet legal and regulatory obligations.

4. Service providers we share data with

We share data only as needed to run the service, with providers acting on our instructions:

• Safaricom M-PESA for mobile money payments.
• Pesapal and Paystack for card and mobile money payment processing.
• Kenya Revenue Authority (eTIMS) for tax invoice submission, where you enable it.
• WhatsApp for notifications and ordering, where you enable it.
• Hosting and infrastructure providers that store and serve the platform.

Our website does not load third-party fonts or analytics trackers; fonts are served from our own servers.

5. Cookies and local storage

We use a session cookie to keep you signed in. We also store a small preference in your browser's local storage (for example, your light or dark theme choice). These are functional and contain no personal data. We do not use advertising cookies.

6. Data retention

We keep personal data for as long as your account is active and as needed to provide the service, then for any further period required by law (for example, tax record-keeping). You can request deletion of data we control, subject to those obligations.

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

• Be informed about how your data is used.
• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion, subject to legal limits.
• Object to or restrict certain processing.

To exercise these rights, contact us using the details below. You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

8. Security

We protect data with SSL/TLS encryption in transit, encryption at rest, automated daily backups, and role-based access controls. No system is perfectly secure, but we work to safeguard your information and notify you of any breach as required by law.

9. International transfers

Where data is processed outside Kenya by our providers, we take steps to ensure it is protected to a standard consistent with the Data Protection Act, 2019.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "last updated" date.

11. Contact us

Mkufunzi ICT Solutions Ltd, Nairobi, Kenya.
Phone: +254 20 230 0565
WhatsApp: +254 20 230 0565