At Tumakazi, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard your data when you use our platform. We comply with the Kenya Data Protection Act, 2019 and other applicable privacy laws.
We collect information that you provide directly to us, as well as information generated through your use of the platform.
1.1 Account Information. When you register as a client or freelancer, we collect your name, email address, phone number, and a password. For freelancers, we also collect professional details such as your skills, portfolio, hourly rate and location.
1.2 Profile Information. You may choose to provide additional information for your public profile, including a profile picture, biography, certifications and languages spoken. Freelancers may also upload portfolio items and links to external work.
1.3 Payment Information. When you make or receive payments through Tumakazi, we collect billing details necessary to process the transaction. We do not store full credit card numbers or M‑Pesa PINs. Payment processing is handled securely by our third‑party payment partners, including Paystack.
1.4 Communications. When you contact us via email, WhatsApp, or through our website forms, we retain a record of that correspondence.
1.5 Usage Data. We automatically collect certain information about your interactions with the platform, such as pages visited, projects posted, bids placed and time spent on the site. This helps us improve our services.
We use the information we collect for the following purposes:
2.1 Platform Operation. To create and manage your account, facilitate project postings and bids, process payments and enable communication between clients and freelancers.
2.2 Profile Display. Freelancer profiles (including name, professional title, skills, portfolio and ratings) are publicly visible to clients browsing the platform. Contact information such as email and phone number is never displayed publicly.
2.3 Communication. To send you transactional emails about project updates, bid notifications, payment confirmations and important account alerts. We may also send occasional newsletters or promotional messages, which you can opt out of at any time.
2.4 Trust and Safety. To verify identities, monitor for fraudulent activity, enforce our Terms and Conditions and maintain a safe marketplace for all users.
2.5 Improvement and Analytics. To analyse usage trends, troubleshoot issues and improve the functionality and user experience of Tumakazi.
2.6 Legal Compliance. To comply with applicable laws, regulations and legal requests, including tax and accounting requirements.
We do not sell, rent or trade your personal information to third parties for their marketing purposes. We share information only in the following limited circumstances:
3.1 Between Clients and Freelancers. When a freelancer bids on a project, the client can view the freelancer's public profile, portfolio and bid proposal. When a client accepts a bid, we share necessary contact details to facilitate project collaboration.
3.2 Service Providers. We engage trusted third‑party companies to perform functions on our behalf, such as payment processing (Paystack), email delivery (Google Workspace) and cloud hosting. These providers only receive the data necessary to perform their services and are contractually obligated to protect it.
3.3 Legal Obligations. We may disclose your information if required by law, court order or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety or the safety of others.
3.4 Business Transfers. In the event of a merger, acquisition or sale of all or a portion of our assets, user information may be transferred as part of the transaction. We will notify you of any such change in ownership or control.
3.5 With Your Consent. In any other situation not described above, we will obtain your explicit consent before sharing your information.
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.
4.1 Active Accounts. Information associated with an active account is retained indefinitely unless you request deletion.
4.2 Closed Accounts. If you close your account, we will delete or anonymise your personal information within a reasonable timeframe, except where retention is required for legal, accounting or fraud prevention purposes.
4.3 Transaction Records. Payment and transaction records are retained for a minimum of seven (7) years to comply with tax and accounting obligations.
4.4 Project History. Completed project details and associated reviews remain visible on the platform to maintain marketplace transparency, even if the freelancer or client later closes their account.
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:
5.1 Right of Access. You may request a copy of the personal data we hold about you.
5.2 Right to Rectification. You may ask us to correct inaccurate or incomplete information. You can also update much of your profile information directly through your account settings.
5.3 Right to Erasure. You may request that we delete your personal data, subject to legal retention requirements and legitimate business interests (such as maintaining project history).
5.4 Right to Object. You may object to certain processing activities, such as direct marketing. You can unsubscribe from marketing emails at any time using the link provided in the email.
5.5 Right to Data Portability. You may request a copy of your data in a structured, commonly used format.
To exercise any of these rights, please contact us at privacy@tumakazi.co.ke. We will respond to your request within thirty (30) days.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These measures include encryption of data in transit (SSL/TLS), secure servers and restricted access to personal data on a need‑to‑know basis.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If we become aware of a data breach, we will notify affected users and relevant authorities as required by law.
Our platform may contain links to third‑party websites or services that are not operated by us. Freelancers may also include portfolio links to external platforms (such as Wistia, YouTube or personal websites). This Privacy Policy does not apply to those third‑party sites. We encourage you to review the privacy policies of any external sites you visit.
Your information may be transferred to and processed in countries outside Kenya where our service providers operate. We take steps to ensure that such transfers comply with applicable data protection laws and that your data receives an adequate level of protection.
Tumakazi is intended for use by adults aged eighteen (18) and over. We do not knowingly collect personal information from children under the age of sixteen (16). If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website with the effective date. If we make material changes, we will notify you via email or through a prominent notice on the platform.
If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us using the details provided below:
← Back to Home