Privacy Policy

Uzapoint Technologies Limited ("Uzapoint," "we," "us," or "our"), part of the Savannah Technologies Group, is committed to protecting the privacy of individuals and businesses who use our website, mobile applications, and point-of-sale (POS) and business management software (collectively, the "Services").

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and the rights you have regarding your data. It applies to visitors to our website, registered Users of our Services, and, where relevant, the end customers of our business Users whose data passes through the platform.

This Policy should be read alongside our Terms and Conditions.

We operate across multiple African markets and process data in accordance with applicable data protection laws, including Kenya's Data Protection Act, 2019, and equivalent legislation in other countries where we provide Services. Where local law imposes additional or different requirements, those requirements shall apply to Users in that jurisdiction.

We use collected data to:

• Provide, operate, and maintain the Services
• Process transactions and payments
• Verify identity and prevent fraud
• Provide customer support
• Send service-related communications and updates
• Improve and develop new features
• Comply with legal and regulatory obligations
• Send marketing communications, where you have opted in (you may opt out at any time)

Where required by applicable law, we process personal data on the basis of: your consent; the necessity of processing to perform a contract with you; compliance with a legal obligation; or our legitimate business interests, provided these are not overridden by your rights and freedoms.

We do not sell your personal data. We may share information with:

• Service providers who support our operations (for example, cloud hosting, payment processing, SMS/email providers), bound by confidentiality and data protection obligations
• Payment and financial partners necessary to process transactions
• Affiliates within the Savannah Technologies Group, for internal business and operational purposes
• Regulators or authorities, where required by law, court order, or to protect our legal rights
• Business transferees, in the event of a merger, acquisition, or sale of assets

We retain personal data for as long as necessary to provide the Services, comply with legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we take reasonable steps to delete or anonymize it.

We implement technical and organizational measures, including encryption, access controls, and regular security reviews, designed to protect personal data against unauthorized access, loss, misuse, or alteration. No system is completely secure, and we cannot guarantee absolute security.

Our website uses cookies and similar technologies to enhance user experience, analyze site traffic, and support marketing efforts. You can control cookie preferences through your browser settings; disabling cookies may affect certain website functionality.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to legal retention requirements
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request data portability
• Lodge a complaint with the relevant data protection authority (for example, the Office of the Data Protection Commissioner in Kenya)

To exercise these rights, contact us using the details in Section 14.

As Uzapoint operates across multiple countries, personal data may be transferred to, stored, and processed in jurisdictions other than your own. Where such transfers occur, we take steps to ensure appropriate safeguards are in place consistent with applicable data protection laws.

Our Services are intended for business use by individuals aged 18 and above. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on our website with a revised "Last Updated" date, and, where changes are material, provide additional notice.

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact: