Privacy Policy

Last Updated: 24 December 2025

PAY N BROWSE is committed to protecting your privacy and complying with the Kenya Data Protection Act, 2019.

1. Introduction

PAY N BROWSE ("we," "us," or "our") operates a WiFi hotspot and PPPoE management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

2.1 Personal Information

Account Information: Name, email address, phone number
Business Information: Business name, address, type of operation
Payment Information: M-Pesa phone number, transaction records
Router Information: IP addresses, MAC addresses, router configurations
Usage Data: Login times, data usage, session duration

2.2 Automatically Collected Information

Device information (type, operating system)
IP addresses and location data
Browser type and version
Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our services
Process M-Pesa payments and commissions
Monitor router performance and network usage
Send service notifications and updates
Provide customer support
Detect and prevent fraud or abuse
Comply with legal obligations
Improve our services and develop new features

4. Legal Basis for Processing (Kenya Data Protection Act, 2019)

We process your personal data based on:

Consent: You have given clear consent for us to process your data
Contract: Processing is necessary to fulfill our service agreement
Legal Obligation: Compliance with Kenyan laws and regulations
Legitimate Interests: Fraud prevention, security, and service improvement

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your information with:

Payment Processors: Safaricom M-Pesa for payment processing
Cloud Hosting: Secure data storage providers
Analytics Services: To improve our platform performance
Communication Services: Email and SMS providers for notifications

5.2 Legal Requirements

We may disclose your information if required by:

Kenyan law enforcement or regulatory authorities
Court orders or legal processes
Protection of our rights or safety of others
Communications Authority of Kenya (CA) compliance

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption of data in transit and at rest
Secure access controls and authentication
Regular security audits and updates
Employee training on data protection
Incident response procedures

7. Data Retention

We retain your personal data for as long as:

Your account remains active
Required to provide our services
Necessary for legal, tax, or accounting purposes (typically 7 years)
Required by Kenyan law or regulations

8. Your Rights Under Kenya Data Protection Act, 2019

You have the right to:

Access: Request copies of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (right to be forgotten)
Restriction: Limit how we process your data
Data Portability: Receive your data in a portable format
Object: Object to certain types of processing
Withdraw Consent: Withdraw consent at any time
Lodge a Complaint: File a complaint with the Office of the Data Protection Commissioner

9. Children's Privacy

Our services are not intended for children under 18 years. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your data is primarily stored and processed in Kenya. If we transfer data outside Kenya, we ensure adequate safeguards are in place as required by the Kenya Data Protection Act, 2019.