Privacy Policy

This Policy explains how Brian Egesah, trading as QuickBuiild Africa (Business Registration No. BN-B8S6YVDZ, registered under the Registration of Business Names Act) ("we", "us") collects, uses, and protects your personal data when you use Kenya Technicians, in accordance with Kenya's Data Protection Act, 2019.

We collect identity documents and a selfie as part of onboarding — see Information We Collect and Sharing Your Information for exactly how those are used and who can see them.

1. Introduction

This Policy applies to everyone who registers for or uses the Platform — Business Accounts, Freelancer Accounts, staff added under a Business Account, and Clients. It should be read alongside our Terms of Service.

2. Information We Collect

We collect the following categories of information:

Account information: full name, phone number, email address, password (stored as a one-way hash, never in plain text), preferred language.
Business/profile information: business or trading name, registered company name (for Business Accounts), tagline, bio, service categories, service radius, contact details, and address, city, and county.
Identity verification (KYC) data: your identification document type and number (National ID, Passport, Business Registration Certificate, or KRA PIN Certificate), an image or scan of that document, and a selfie photograph, submitted for identity verification.
Transaction and financial data: wallet balance and history, deposits, withdrawals, invoices, subscription plan and billing history. We do not store your M-Pesa PIN or full payment credentials — these are handled directly by the relevant payment provider (e.g. Safaricom's Daraja platform).
Service activity: Jobs, Projects, and Bookings you create, apply to, or complete, cancellation and no-show records, and communications sent through the Platform.
Technical data: IP address, device and browser information, and log data, collected automatically for security and audit purposes.

3. How We Use Your Information

We use your information to:

Create and manage your account, and verify your identity before activating a Provider account;
Operate core Platform features: job/project/booking matching, the marketplace listing, wallet and escrow, invoicing, and subscription billing;
Send transactional notifications by SMS, email, or in-app message (booking confirmations, payment receipts, KYC status, security alerts);
Investigate suspected fraud, policy violations, or disputes between users, and maintain audit logs of account-scoped actions for accountability;
Comply with legal, regulatory, and tax obligations;
Improve and secure the Platform.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the Data Protection Act, 2019: performance of the contract formed by these Terms when you register and transact on the Platform; compliance with a legal obligation (for example, identity verification and financial record-keeping); our legitimate interests in operating and securing the Platform; and, where applicable, your consent (for example, marketing communications, which you may withdraw at any time).

We do not sell your personal data. We share it only where necessary to operate the Platform:

Other users: a Client and a Provider engaged in the same Job, Project, or Booking see each other's relevant contact and profile information necessary to complete that engagement. Your identity document and selfie are never shared with other users — they are used internally for verification only.
Payment processors: transaction details necessary to process a deposit or withdrawal are shared with the relevant payment provider (e.g. Safaricom's Daraja/M-Pesa platform).
Communication providers: your phone number and message content are shared with our SMS gateway provider (e.g. Africa's Talking) solely to deliver the notification.
Platform administrators: authorized staff who review KYC submissions, handle support requests, or investigate disputes.
Legal and regulatory bodies: where required by law, court order, or a lawful request from a competent authority.
Service providers: hosting, database, and infrastructure providers who process data on our behalf under confidentiality obligations.

6. Data Storage & Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold — including password hashing, access controls tied to account roles and permissions, and audit logging of sensitive account actions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your data against unauthorized access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data for as long as your account is active, and afterwards for as long as necessary to comply with our legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. Identity verification documents and audit/financial records are typically retained longer than routine profile data because of statutory record-keeping requirements applicable to financial transactions in Kenya. When data is no longer needed, we securely delete or anonymize it.

8. Your Rights

Under the Data Protection Act, 2019, you have the right to: be informed of how your data is used; access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to our legal retention obligations); object to or restrict certain processing; and lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated.

To exercise any of these rights, contact us using the details in Contact Us. We will respond within the timeframes required by law.

9. Cookies & Tracking

The Platform uses essential session cookies required for you to stay logged in and to protect against cross-site request forgery. We do not currently use third-party advertising or tracking cookies. If this changes, we will update this Policy and, where required, request your consent.

10. Children's Privacy

The Platform is not intended for use by anyone under 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

11. International Transfers

Some of our service providers (such as payment or SMS gateways, or infrastructure providers) may process data outside Kenya. Where this occurs, we take steps to ensure the transfer complies with the Data Protection Act, 2019, including verifying that the recipient provides an adequate level of data protection or that appropriate contractual safeguards are in place.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email, SMS, or an in-app notice before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact Us

For any question about this Policy, or to exercise your data protection rights, contact our Data Protection Officer at support@technician.co.ke or by phone/WhatsApp to +254 700 000 000. Our registered address is 662, Kisumu Ndogo Road, Uasin Gishu Wareng District Pioneer, P.O. Box 4461-30100, Eldoret.