PICKSPOT
PRIVACY POLICY
Operated by PickSpot Network Limited
PickSpot Network Limited (“PickSpot”, “we”, “us”) is the data controller for personal data processed through PickSpot, PickSend, our websites, and related services. This policy explains what we collect, why, and your rights under the Kenya Data Protection Act, 2019 (the “DPA”). By using our services you acknowledge these practices.
Information we collect
- Account: name, phone number, email, date of birth, and profile details.
- Delivery: saved addresses, delivery instructions, and order and delivery history.
- Transactions: order and merchant details, payment confirmations, settlement and refund records. We do not store full payment card details.
- Verification: government-issued ID, selfies, and verification results, where verification is required.
- Images: product, rejection, verification, and support photographs you submit.
- Device and usage: device identifiers, IP address, app version, and activity logs.
Government ID and selfies are sensitive personal data; we collect them only where needed for identity verification and fraud prevention, and handle them with corresponding care.
Why we process it, and our lawful bases
We process personal data to operate handles and accounts, coordinate orders, payments, and deliveries, process refunds, verify identity, prevent fraud, provide support, and meet legal obligations. Our lawful bases under the DPA are: performance of your contract (operating orders, payments, deliveries, settlement); legitimate interests (fraud prevention, security, service improvement); legal obligation (regulatory and record-keeping duties); and consent (certain analytics and communications, which you may withdraw).
International transfers
Some providers process data outside Kenya. Where that happens, we take reasonable steps to ensure appropriate safeguards consistent with the DPA.
Retention
We keep personal data only as long as needed to operate the platform, maintain transaction records, resolve disputes, prevent fraud, and meet legal obligations, after which it is deleted or anonymised.
Your rights
Subject to the DPA, you may access, correct, or delete your data, object to or restrict certain processing, and withdraw consent. Some requests may be limited where we must retain data by law or for fraud prevention. To exercise your rights, contact contact@pickspot.net; you may also complain to the Office of the Data Protection Commissioner (ODPC).
Cookies and analytics
Our websites use cookies and similar technologies to keep you signed in, secure the service, remember preferences, and measure usage. We use strictly necessary cookies (required for the site to work) and, with your consent, analytics cookies (including Google Analytics, loaded via Google Tag Manager). Non-essential cookies are not set until you consent through our cookie banner, and you can change your choice at any time in your browser or the banner settings. Disabling non-essential cookies does not affect core functionality.
Security and children
We use reasonable technical and organisational measures to protect personal data; no system is perfectly secure, and you are responsible for safeguarding your credentials. PickSpot is for users aged 18 and over; we do not knowingly collect data from anyone under 18.
Changes
We may update this policy, and material changes take effect on publication.
Contact Information
For any questions about this policy or your personal information, reach us at contact@pickspot.net.