Privacy Policy

1. Introduction

Boror Limited (“Boror”, “we”, “us”) operates Boror Marketplace (“Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform or submit an enrollment application. By using the Platform, you consent to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Identity Data: Full name, date of birth, gender, national ID number, passport photo.
• Contact Data: Email address, phone number, physical address.
• Business Data (Vendors): Business name, type, KRA PIN, business registration documents.
• Vehicle & License Data (Riders): Vehicle type, make, model, registration number, driving license number, insurance details, logbook.
• Financial Data: Bank account details, M-Pesa number (for payouts only).
• Location Data: County, sub-county, ward, preferred pickup station.
• Documents: Scanned copies of ID, driving license, vehicle logbook, insurance certificate, business registration certificate.
• Usage Data: Log data, device information, IP address, and browsing activity on the Platform.

3. How We Use Your Information

We use your personal information to:

• Process and evaluate your vendor or rider enrollment application.
• Create and manage your account on the Platform.
• Facilitate order fulfillment, delivery coordination, and payout processing.
• Verify your identity and ensure compliance with legal requirements.
• Send important notifications about your account, orders, or Platform updates.
• Prevent fraud, enforce our Terms & Conditions, and comply with legal obligations.
• Improve the Platform through analytics and feedback.

4. Legal Basis for Processing

We process your data on the following bases:

• Contractual necessity: To fulfill our agreement with you as a vendor or rider.
• Legal obligation: To comply with Kenyan law (e.g., KRA tax compliance).
• Legitimate interest: To prevent fraud, improve our services, and ensure platform security.
• Consent: Where you have explicitly agreed (e.g., marketing communications).

5. Sharing Your Information

We do not sell your personal data. We may share it with:

• Service providers: Payment processors, cloud hosting providers, and IT service partners under strict confidentiality agreements.
• Platform participants: Customers receive limited delivery tracking information (rider first name, phone) to facilitate delivery.
• Regulators and authorities: Where required by Kenyan law, court order, or regulatory request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred.

6. Data Retention

We retain your personal data for as long as your account is active or as required by law. Documents submitted during enrollment are retained for a minimum of 5 years to meet legal and audit requirements. You may request deletion of non-legally required data at any time.

7. Security

We implement technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under applicable Kenyan data protection law (Data Protection Act, 2019), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention obligations).
• Object to certain processing activities.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these rights, contact us at info@boror.shop.

9. Cookies

We use essential cookies to maintain your session and security tokens (CSRF protection). We do not use tracking or advertising cookies. You may disable cookies in your browser, but this may affect Platform functionality.

10. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance.

12. Contact Us

For privacy-related inquiries or to exercise your rights, contact our Data Protection Officer:
Email: info@boror.shop
Phone: +254 117 393427
Address: Nairobi, Kenya