Privacy Policy

1. Who we are

This Privacy Policy explains how Stoqera (“Stoqera”, “we”, “us”) collects, uses, shares, and protects personal data when you use our website and the Stoqera inventory management platform (the “Service”). For most of the data described below, we act as the data controller; for business data your organization enters into the Service about its own employees or contacts, we act as a data processoron your organization's behalf.

2. Data we collect

We collect the following categories of data:

• Account data — name, email address, phone number, and business name, when you register an organization or team member account.
• Business data— product, supplier, stock, and location information your organization enters into the Service, and information about your own team members entered by your organization's admins.
• Usage data — log data, device and browser information, and how you interact with the Service, collected automatically.
• Communications — information you provide when contacting us or requesting a demo, such as the fields on our demo request form.

3. How we use your data

• To provide, maintain, and secure the Service.
• To create and manage organization and team member accounts, and to enforce role-based permissions.
• To respond to demo requests and support inquiries.
• To send service-related communications, such as changes to these terms or security notices.
• To monitor, investigate, and prevent misuse or security incidents.
• To comply with legal obligations.

4. Legal basis for processing

Where the Data Protection Act, 2019 (Kenya) or a similar law applies, we process personal data on the following bases: performance of a contract (to provide the Service you've signed up for), legitimate interests (such as securing the Service and improving it), consent (for optional communications you can opt out of), and compliance with legal obligations.

5. How we share data

We do not sell personal data. We share data only with:

• Infrastructure and hosting providers that store and run the Service on our behalf.
• Service providers who support functions like email delivery or analytics, bound by confidentiality obligations.
• Authorities, where required to comply with a legal obligation, or to protect the rights, property, or safety of Stoqera, our users, or others.
• A successor entity, in the event of a merger, acquisition, or sale of assets, with notice to affected users where required by law.

6. Data retention

We retain personal data for as long as your organization's account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your data as described in Section 8 below.

7. How we protect your data

We use technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction — including role-based access controls within the Service itself, so that team members only see what their assigned role permits. No system is completely secure, and we cannot guarantee absolute security.

8. Your rights

If the Data Protection Act, 2019 (Kenya) or a similar law applies to you, you have the right to:

• Be informed of the use to which your personal data is to be put.
• Access your personal data in our custody.
• Request correction of inaccurate or outdated personal data.
• Request deletion of your personal data, subject to legal exceptions.
• Object to, or restrict, certain processing of your personal data.
• Request a copy of your personal data in a portable format.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, or your local data protection authority.

To exercise any of these rights, contact us at hello@stoqera.co.ke. If your organization has entered data about you into the Service (for example, as a team member added by your employer), you may also need to contact your organization's administrator directly, since they control that data.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

10. Children's privacy

The Service is business software intended for use by adults acting on behalf of a business. It is not directed at, and we do not knowingly collect personal data from, children.

11. International data transfers

If personal data is transferred outside Kenya, we will take steps required by applicable law to ensure it receives an adequate level of protection.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice, such as by email or an in-app notice, before the changes take effect.

13. Contact

Questions about this Privacy Policy, or requests relating to your personal data, can be sent to hello@stoqera.co.ke.