JBOOKING · Effective date: April 20, 2026 · Kenya Data Protection Act 2019 compliant
Your privacy matters. This policy explains exactly what information JBOOKING collects about you, why we collect it, and how you can control it. We follow the Kenya Data Protection Act 2019.
When you sign up as a vendor or use JBOOKING as a customer, we collect: • Your name and business name • Your phone number (used for M-Pesa payments and account login) • Your business location (GPS coordinates, when you allow it) • Your order history on the platform • M-Pesa receipt number confirming payment (we do not store your PIN or full payment details) • Device information (browser type, operating system) for platform improvements
We use your data only for the following purposes: • To show your business on the JBOOKING map so customers can find you • To process pre-orders and manage your queue • To confirm your subscription payment and keep your account active • To send you important updates about your account or orders • To improve the platform based on how it is used
Under the Kenya Data Protection Act 2019, we process your data based on: • Consent — you chose to sign up for JBOOKING • Contract — processing is necessary to provide the service you signed up for (subscription, listings, orders) • Legitimate interest — improving the platform for all users
Your business information (name, category, location, menu/services) is public on the platform — that is the whole point of being listed. Customers need to see this to find and order from you. Your personal details — phone number, payment confirmation, and account information — are private. We do not share these with other vendors or customers except as strictly necessary to fulfill an order (e.g. a customer may see your business phone number to confirm their order). We never sell your personal data to third parties. We do not share your data with advertisers.
Payments are processed directly by Safaricom M-Pesa. When you complete a payment, Safaricom sends us a receipt number confirming success — we store only this receipt number to verify your subscription. We do not see or store your M-Pesa PIN, your bank account, or any other payment credentials. Safaricom's own privacy policy applies to the payment transaction.
We use your location to place your business on the JBOOKING map. For vendors, this is your business address (which you provide when signing up). For customers, we may request your device location to show nearby businesses — this is optional and controlled by your phone's location settings. You can turn off location access at any time in your device settings.
Your data is stored securely on our servers. JBOOKING uses Vercel for hosting and may use Supabase or similar infrastructure for database storage. These services are hosted outside Kenya (primarily in the United States and European Union). We ensure these transfers are covered by appropriate safeguards including standard contractual clauses as required by the Kenya Data Protection Act 2019.
Under the Kenya Data Protection Act 2019, you have the right to: • Access — request a copy of the personal data we hold about you • Correction — ask us to fix inaccurate data • Deletion — ask us to delete your data (subject to our retention obligations) • Withdraw consent — stop us processing data where consent was the basis • Object — object to processing for legitimate interests To exercise any of these rights, contact us via WhatsApp at +254740469914 or email hello@jbooking.co.ke. We will respond within 30 days.
We keep your personal data for as long as your account is active. After you cancel or delete your account, we retain your data for 12 months to comply with legal obligations (including tax and payment records). After that period, your personal data is deleted or anonymised.
JBOOKING is not directed at users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or in Kenyan data protection law. When we make significant changes, we will notify you through the app or by WhatsApp. Your continued use of JBOOKING after the update means you accept the revised policy.
Our Data Protection Officer is responsible for overseeing data privacy matters at JBOOKING. Samuel M Karau WhatsApp: +254740469914 Email: hello@jbooking.co.ke Nairobi, Kenya