Privacy Policy

Last Updated: May 6, 2026

EDJAM Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Name, email address, phone number, and company information
• Account credentials and authentication information
• Financial information and transaction data
• Communications and correspondence with us
• Feedback, survey responses, and support requests

1.2 Automatically Collected Information

When you access our services, we automatically collect:

• IP address, browser type, and device information
• Log data, including access times and pages viewed
• Cookies and similar tracking technologies
• Usage patterns and interaction data

2. How We Use Your Information

We use your information for the following purposes:

• Providing, operating, and maintaining our services
• Processing transactions and managing your account
• Communicating with you about services, updates, and support
• Improving and developing our products and services
• Detecting, preventing, and addressing security issues and fraud
• Complying with legal obligations and regulatory requirements
• Analyzing usage trends and optimizing user experience

3. Data Sharing and Disclosure

3.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including cloud hosting, payment processing, data analytics, and customer support. These providers are contractually obligated to protect your information.

3.2 Business Partners

With your consent, we may share information with financial institutions and business partners to provide integrated services.

3.3 Legal Requirements

We may disclose your information when required by law, legal process, or to protect the rights, property, or safety of EDJAM, our users, or others.

3.4 Business Transfers

In connection with any merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

4. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• ISO 27001, PCI DSS, and SOC 2 Type II compliance
• 24/7 security monitoring and incident response

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Financial transaction data is retained for 7 years in compliance with Kenyan regulations.

6. Your Rights (Kenya Data Protection Act 2019)

Under the Kenya Data Protection Act 2019, you have the following rights:

• Right to Access: Request access to your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain types of processing
• Right to Lodge a Complaint: File a complaint with the Office of the Data Protection Commissioner

To exercise these rights, contact us at privacy@edjam.co.ke

7. International Data Transfers

Your information may be transferred to and processed in countries other than Kenya. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand usage patterns
• Functional Cookies: Remember your preferences

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on our website and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

EDJAM Limited
Data Protection Officer
Kijabe Street, Nairobi, Kenya
Email: privacy@edjam.co.ke
Phone: +254 721 680 973

Office of the Data Protection Commissioner (Kenya):
Website: www.odpc.go.ke