Privacy Policy

1. Introduction

TIJWA Ltd ("Tijwa", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (tijwa.com), use our services, or interact with our WhatsApp chatbots and software systems.

This policy complies with the Kenya Data Protection Act, 2019 (DPA) and related regulations.

2. Information We Collect

We may collect the following types of information:

• Personal Identification Information: Name, email address, phone number, company name, job title
• Communication Data: Messages sent via WhatsApp chatbots, contact forms, or email
• Transaction Data: Payment information (processed via M-Pesa or other payment providers), purchase history
• Technical Data: IP address, browser type, device information, operating system, referring URLs
• Usage Data: Pages visited, time spent on pages, click patterns, navigation paths
• Cookie Data: Session cookies, analytics cookies, and preference cookies

3. How We Use Your Information

We use collected information for:

• Providing and maintaining our Services
• Processing transactions and sending payment-related communications
• Responding to enquiries and providing customer support
• Sending service updates, newsletters, and marketing communications (with your consent)
• Improving our website, services, and user experience
• Complying with legal obligations
• Detecting and preventing fraud or abuse

4. WhatsApp Chatbot Data

Our WhatsApp chatbots process messages to provide automated customer service. Messages may be stored to improve service quality and train AI models. We do not share WhatsApp conversation data with third parties except as required to provide the service (e.g., Meta/WhatsApp for message delivery).

5. M-Pesa Data

When processing M-Pesa payments, we receive transaction confirmation data (phone number, amount, transaction ID) from Safaricom. We do not store M-Pesa PINs or full payment credentials. Transaction data is retained for accounting and reconciliation purposes as required by Kenyan law.

6. Data Sharing

We may share your information with:

• Service Providers: Hosting providers, payment processors, analytics services
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

We do not sell your personal data to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), access controls, regular security assessments, and secure data storage. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Transaction records are retained for 7 years in compliance with Kenya Revenue Authority requirements.

9. Your Rights

Under the Kenya Data Protection Act, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time

To exercise these rights, contact us at sales@tijwa.com.

10. Cookies

Our website uses cookies to improve your experience. Essential cookies are necessary for the site to function. Analytics cookies help us understand how visitors use our site. You can control cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our Services after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related enquiries or to exercise your data rights: