Privacy Policy
How we collect, use, and protect your personal information.
1. Data We Collect
When you create an account or place an order, we collect the following information:
- Name — to identify your account and address you in communications
- Email address — for account access, order confirmations, and renewal reminders
- Phone number — for M-Pesa payment processing and urgent support contact
- M-Pesa transaction reference — to confirm and track your payments
Google Sign-In Users
If you sign in using Google, we additionally collect:
- Google Account ID — to link your Google account to your KwikiHost account
- Profile picture URL — to display your avatar in the customer dashboard
We do not access your Google contacts, files, or any other Google data.
2. How We Use Your Data
- Order fulfilment — processing your domain registration and hosting setup
- Payment processing — initiating and confirming M-Pesa transactions
- Renewal reminders — sending email/SMS reminders before your services expire
- Customer support — responding to your enquiries via email or WhatsApp
- Service improvements — understanding usage patterns to improve KwikiHost
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Data Storage
Your data is stored in a PostgreSQL database on our hosting infrastructure. We use industry-standard security practices including:
- Password hashing (bcrypt)
- HTTPS encryption for all data in transit
- Session-based authentication with automatic expiry
4. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records (e.g., payment records may be retained for tax compliance for up to 7 years).
5. Your Rights
You have the right to:
- Access your personal data stored in your KwikiHost account
- Correct any inaccurate data via your account settings
- Request deletion of your account and associated data
- Export your order and invoice history
To exercise any of these rights, email us at [email protected].
6. Cookies
We use session cookies to keep you logged in and protect against CSRF attacks. We do not use tracking cookies or third-party analytics cookies. No data is shared with advertising networks.
7. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email to registered customers.
8. Contact
For privacy-related enquiries, contact us at [email protected].
Last updated: March 2026