Privacy Policy

1. Introduction

Zuri Business Communications, a product of Edgecloud Technologies Limited, is committed to protecting the personal data of its customers and users. This Privacy Policy describes how we collect, use, store, and protect your information in compliance with the Kenya Data Protection Act (KDPA) 2019.

2. Data We Collect

We collect the following categories of data:

• Account data: Name, email address, organisation name, phone number, and billing information provided during registration
• Usage data: Log files, access times, features used, and service interactions
• Communication data: Emails, calendar entries, files, and messages stored and processed through the Service
• Payment data: Transaction records processed through M-Pesa or other payment providers

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the Zuri Business Communications platform
• Process payments and manage your subscription
• Respond to support requests and communicate service updates
• Comply with legal obligations under Kenyan law
• Detect and prevent fraud, abuse, or security incidents

We do not sell your data to third parties. We do not use your communication content for advertising purposes.

4. Data Sharing

We share data only with:

• Service providers: Infrastructure and hosting partners who process data on our behalf under appropriate data processing agreements
• Payment processors: M-Pesa and other payment providers for billing purposes
• Legal authorities: Where required by Kenyan law or valid legal process

5. Data Retention

We retain your data for as long as your account is active. Upon termination of your subscription, data is retained for 30 days to allow for export requests, after which it is deleted. Backup data is retained in accordance with your plan's backup retention policy.

6. Security

We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest, access controls, and regular security assessments. While no system is completely secure, we take reasonable steps to protect your information.

7. Your Rights Under the KDPA

As a data subject under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Object to processing of your data in certain circumstances
• Data portability - receive your data in a commonly used format

To exercise these rights, contact us at hello@zurimail.co.ke.

8. Cookies

Our web platform uses essential cookies required for authentication and service functionality. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect service functionality.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after notification constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries or to exercise your rights, contact us at hello@zurimail.co.ke or write to Edgecloud Technologies Limited, Nairobi, Kenya.