Privacy Policy

Last Updated: January 7, 2025

1. Introduction

BulkPesa ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our M-Pesa bulk payment platform.

By using BulkPesa, you consent to the data practices described in this policy. This policy complies with the Kenya Data Protection Act, 2019, and Safaricom M-Pesa privacy requirements.

2. Information We Collect

2.1 Personal Information

  • Phone numbers (yours and recipients')
  • Transaction amounts and payment details
  • IP address and device information
  • Browser type and operating system
  • Usage patterns and preferences

2.2 M-Pesa Transaction Data

  • M-Pesa receipt numbers
  • Transaction timestamps
  • Transaction status and results
  • Account reference numbers

2.3 Technical Information

  • Log files and server data
  • Cookies and similar technologies
  • Performance and error data

3. How We Use Your Information

  • Process M-Pesa bulk payments and transactions
  • Verify transaction status and provide updates
  • Prevent fraud and ensure platform security
  • Comply with legal and regulatory requirements
  • Improve our services and user experience
  • Provide customer support
  • Send transaction confirmations and notifications

4. Information Sharing and Disclosure

4.1 With Safaricom/M-Pesa

We share necessary transaction data with Safaricom to process M-Pesa payments. This includes phone numbers, amounts, and transaction references as required by their API.

4.2 Legal Requirements

We may disclose your information when required by law, regulation, legal process, or to protect the rights, property, or safety of BulkPesa, our users, or others.

4.3 We Do Not Sell Personal Information

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

  • SSL/TLS encryption for data transmission
  • Secure database storage with encryption at rest
  • Regular security audits and monitoring
  • Access controls and authentication
  • Compliance with Safaricom security requirements

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services
  • Comply with legal obligations (minimum 7 years for financial records)
  • Resolve disputes and enforce agreements
  • Meet regulatory requirements

7. Your Rights

Under the Kenya Data Protection Act, you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your information (subject to legal requirements)
  • Object to processing in certain circumstances
  • Data portability
  • Withdraw consent where applicable

To exercise these rights, contact us at privacy@bulkpesa.com or +254 750 877 440.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences
  • Analyze website traffic and usage
  • Prevent fraud and ensure security
  • Improve website performance

You can control cookies through your browser settings, but this may affect website functionality.

9. International Transfers

Your data is primarily processed within Kenya. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable laws.

10. Children's Privacy

BulkPesa is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of BulkPesa after changes become effective constitutes acceptance of the updated policy.

12. Contact Information

Data Protection Officer: BulkPesa Privacy Team

Email: privacy@bulkpesa.com

Phone: +254 750 877 440

Address: Nairobi, Kenya

13. Regulatory Compliance

This Privacy Policy complies with:

  • Kenya Data Protection Act, 2019
  • Central Bank of Kenya regulations
  • Safaricom M-Pesa terms and conditions
  • Communications Authority of Kenya requirements