Contents
- 1. Introduction
- 2. Data Collection
- 3. How We Use Your Data
- 4. Data Security
- 5. User Rights
- 6. Compliance & Legal Framework
- 7. Contact & Complaints
Contact Us
- Email: legal@citruslabs.co.ke
- Mailing Address: P.O. Box 23983 - 00100
- Phone: +254 112 400 000
At CarPal, we prioritize the security and privacy of your data while ensuring compliance with Kenya's Data Protection Act, 2019 and international data privacy standards. This Data Policy outlines how we collect, use, and protect your information as an Auto Repair Shop account holder.
1. Introduction
CarPal is a digital platform designed to streamline auto repair shop operations. This policy applies to all data collected from business accounts, vehicle owners, and transactions conducted through the platform.
Key Definitions:
- Personal Data: Any information relating to an identifiable individual.
- Business Account Data: Information related to the repair shop and its staff.
- Service Data: Information collected during vehicle check-ins, service history, and invoices.
2. Data Collection
We collect the following types of data:
Vehicle Data
- Basic vehicle information (make, model, year, plate number).
- Service history and past repairs.
- Assessment details, including photos of vehicle condition.
Customer Data
- Personal details (name, ID number).
- Contact details (email, phone number).
- Communication preferences for service updates.
Payment Data
- M-Pesa transaction details for invoice processing.
- Invoice and payment records.
Business Account Data
- Business registration details and tax information.
- Staff access logs and audit records.
3. How We Use Your Data
Your data is used strictly for operational purposes, including:
Service Provision
- Vehicle check-in and check-out processes.
- Generating invoices and tracking payments.
- Repair documentation and customer approvals.
Analytics & Personalization
- Enhancing service efficiency and user experience.
- Generating business performance reports.
Automated Communications
- Sending repair updates via SMS and email.
- Providing notifications on invoices and payments.
Third-Party Data Sharing
We may share limited data with:
- Insurance companies for claims processing.
- Service providers (e.g., towing services) when necessary.
- Legal authorities when required by law.
4. Data Security
We implement stringent security measures, including:
Access Controls
- Role-based access restrictions.
- Multi-factor authentication for business accounts.
- Continuous activity monitoring to detect unauthorized access.
Storage & Encryption
- All data is stored in secure, encrypted databases.
- Sensitive financial and personal information is encrypted end-to-end.
Retention & Deletion Policy
- Active accounts: Data is retained for service continuity.
- Inactive accounts: Data is archived after 12 months of inactivity.
- Deletion requests: Business accounts can request permanent data removal.
5. User Rights
As per the Kenya Data Protection Act, 2019, you have the right to:
- Access your data: Request a copy of the data we hold.
- Rectify inaccuracies: Update or correct incorrect information.
- Request deletion: Have your data erased under lawful conditions.
- Restrict processing: Limit how your data is used.
- Data portability: Request a structured format of your data for transfer.
Requests are processed within 30 days upon verification of identity.
6. Compliance & Legal Framework
CarPal adheres to:
- Kenya's Data Protection Act, 2019 for lawful data handling.
- International data security standards (ISO 27001).
- Regular audits to ensure compliance and data protection best practices.
7. Contact & Complaints
For data privacy concerns or complaints:
- Contact our Data Protection Officer (DPO) at legal@citruslabs.co.ke.
- File a complaint with Kenya's Office of the Data Protection Commissioner (ODPC) if unsatisfied with our response.
By using CarPal, you acknowledge that you have read and understood this Data Policy. We are committed to protecting your privacy while ensuring seamless business operations for auto repair professionals.
🔒 Your Data. Your Control. Your Security.