This Privacy Policy explains what personal data is collected when you use the dukamaps.co.ke website and/or the Duka Maps Android mobile application (together, the “Service”), and how such personal data is used and shared.
By using the Service, you confirm that (i) you have read, understand, and agree to this Privacy Policy, and (ii) you are over 16 years of age (or your parent/guardian has reviewed and agreed to this Policy for you). If you do not agree, you must not use the Service. You can request deletion of your account and data here.
“Process” in respect of personal data includes collecting, storing, using, and disclosing to others.
2. Categories of Personal Data We Collect
8. Cookies & Similar Technologies
10. International Transfers & Security
Duka Maps, a business registered in the Republic of Kenya under Business No. BN-MXC9A22M is the controller of your personal data for the Service.
The Android app primarily acts as a secure browser (WebView) for our website. The app itself does not create a separate user account, collect analytics, or run advertising SDKs. It accesses device capabilities only when you choose features that need them (for example, allowing location to show nearby places, or choosing a photo to upload). Any information you submit is processed by our website https://dukamaps.co.ke and its backend services.
We collect data you provide directly and data collected automatically when you use the Service.
When you register or use the Service, you may provide: first name, last name, phone number, email address, gender, date of birth (together the “Required Information”), plus address/location details, business details, working hours, and photos/images you upload. Some features (e.g., adding a duka, adding products/services, or becoming an agent) may require an account and Required Information.
Support communications may require additional information to verify identity (e.g., an ID document) in limited cases (such as resolving account blocks).
When adding a duka, you provide business name, type, what you deal in, location, contact details, working hours, and photos. You acknowledge this information may be publicly visible to help customers find your duka. Consider the risks of making contact and location details public.
We may collect referring URL (the page you were on before visiting Duka Maps).
We collect device information such as operating system, browser/app version, device type, and—if you allow—device location (to show nearby places). The Android app requests foreground location permission only; no background location is collected.
We log interactions with features and content (e.g., pages viewed, buttons tapped), frequency and duration of use, and sections used, to operate and improve the Service.
If you make or receive payments via the Service, we may process transaction ID, payer/payee name, amount, date, and time. Payments may be handled by third-party processors (e.g., M-Pesa) per their terms and policies.
We process personal data to:
We process personal data under one or more of the following legal bases:
We share data with vendors acting on our instructions to operate the Service, such as:
We may disclose data to protect rights, privacy, safety, or property, and to respond to lawful requests by courts, law enforcement, regulators, or other authorities.
We may share or transfer data in connection with a merger, acquisition, financing, reorganization, or sale of assets, including during negotiations.
Subject to applicable law (including the Kenya Data Protection Act, 2019), you may have rights to access, correct, update, object to, or request deletion of your personal data.
We will honor requests as required by law. In some cases we may retain limited data to comply with legal obligations or resolve disputes.
We do not knowingly process personal data of persons under 16 years. If you believe a child under 16 has provided personal data, contact us at info@dukamaps.co.ke so we can take appropriate action.
We use cookies and similar technologies (including pixels) to operate the Service, remember preferences, and, where applicable, measure performance or deliver relevant content. Cookies may be session (expire on close) or persistent. You can control cookies via your browser/app settings. Embedded third-party services (e.g., YouTube) may set their own cookies according to their policies.
We retain personal data for as long as necessary for the purposes described in this Policy, including while you maintain an account and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. We may retain limited records (e.g., hashed contact identifiers or block flags) where required for fraud prevention or legal compliance.
We may process data in countries outside your own. Where we transfer personal data internationally, we take appropriate measures to protect it in accordance with applicable law.
We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No system is completely secure; please use the Service responsibly and keep your account credentials confidential.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means. Your continued use of the Service after changes become effective signifies your acceptance of the revised Policy.
If you have questions about this Privacy Policy or your personal data, contact: info@dukamaps.co.ke.
Effective date: 17 October 2025