Privacy Policy

Effective date: 1 January 2025 · Last updated: 1 October 2026

Dukkapu Limited ("Dukkapu", "we", "us") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

    Dukkapu is a B2B platform. By registering you confirm you are acting on behalf of a
    business and that any personal data you provide relates to your business role.
  

1. Information We Collect

1.1 Information you provide

Account data: name, business email, phone number, company name, role.
Profile data: company description, location, product/service categories.
Transaction data: RFQs, quotes, orders, invoices and messages.
Payment data: payment method details (processed by third-party providers).
Uploaded content: product images, documents attached to listings or RFQs.

1.2 Information collected automatically

IP address, browser type, device information.
Pages visited, time spent, search queries on the platform.
Cookies and session tokens (see Section 7).

2. How We Use Your Information

Purpose	Legal basis
Providing and operating the platform	Contract performance
Verifying your business identity	Legitimate interests
Facilitating buyer–seller connections	Contract performance
Sending transactional notifications	Contract performance
Improving platform features	Legitimate interests
Fraud prevention and security	Legitimate interests / legal obligation
Marketing communications (with consent)	Consent
Complying with Kenyan law	Legal obligation

3. Sharing Your Information

We share your information only as necessary:

With other users: your business name, categories and listing details are visible to buyers or sellers you transact with.
Service providers: hosting, payment processing, email delivery — bound by confidentiality agreements.
Legal authorities: when required by Kenyan law or valid legal process.
Business transfers: in the event of a merger or acquisition, with notice to you.

We do not sell your personal data to third parties.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Transaction records are retained for 7 years to comply with Kenyan tax regulations. You may request deletion of your account and associated personal data at any time (see Section 6).

5. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (HTTPS), hashed passwords, access controls and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

6. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (subject to legal retention obligations).
Object to processing based on legitimate interests.
Withdraw consent for marketing at any time.
Data portability — receive your data in a structured format.

To exercise any of these rights, contact us at support@dukkapu.com or +254 737 766 200. We will respond within 30 days.

7. Cookies

We use session cookies and local storage tokens solely to maintain your login session. We do not use tracking, advertising or analytics cookies. You may clear cookies via your browser settings, which will log you out of the platform.

8. Third-Party Links

The platform may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.

9. Children

Dukkapu is a business platform and is not directed at individuals under 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-platform notice. The "Last updated" date at the top will always reflect the current version.

11. Contact & Complaints

For privacy enquiries or complaints:

Phone: +254 737 766 200
Email: support@dukkapu.com
Hours: Monday – Friday, 8am – 6pm EAT

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.