Placeholder document. This page is a structural template and does not constitute legal advice. Replace all [bracketed] values and have the final text reviewed by a qualified lawyer before going live.

Privacy Policy

Last updated: [DATE]

1. Who We Are

tuktuk.africa Ltd. ("we", "us") operates the website tuktuk.africa and the tuktuk.africa fleet management platform. This policy explains how we collect, use, and protect personal data. Data controller: [legal entity, address, contact of Data Protection Officer if appointed]

2. Legal Framework

We process personal data in accordance with the Kenya Data Protection Act, 2019 and, where applicable to users in the European Economic Area, the EU General Data Protection Regulation (GDPR). [Add other applicable local laws per target market]

3. Data We Collect

Website visitors: server logs (IP address, browser, pages visited), cookie data as described in our Cookie Policy.
Demo & contact requests: name, company, email address, phone number, fleet size.
Platform customers: account data, fleet and vehicle data, driver records (names, phone numbers, ID and licence details), payment records (including M-Pesa transaction references), GPS location data of fleet vehicles, and WhatsApp/SMS communication logs processed on behalf of the fleet operator.

4. Why We Process It

[List processing purposes and legal bases: contract performance, legitimate interest, consent …]

5. Data Processors & Third Parties

We work with third-party providers to deliver the service, including payment providers (Safaricom M-Pesa, Diamond Trust Bank), messaging providers (WhatsApp Business ecosystem), GPS/IoT providers, and hosting providers. [Full list of processors incl. data processing agreements and transfer safeguards]

6. Data Retention

[Retention periods per data category]

7. Your Rights

Subject to applicable law, you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at hello@tuktuk.africa. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya [or your local supervisory authority].

8. Data Security

[Describe technical & organisational measures: encryption, access controls, backups …]

9. Changes to This Policy

We may update this policy from time to time. The current version is always available on this page.