Privacy Policy & Kenya Data Protection Compliance

Commitment to Data Privacy

BetterHealth Solutions ("we", "our", or "the Company") is firmly committed to safeguarding the privacy and confidential personal data of all visitors and customers. This Privacy Policy outlines our data collection, lawful processing, and protection practices in compliance with the Kenya Data Protection Act, 2019 (Act No. 24 of 2019) and the guidelines of the Office of the Data Protection Commissioner (ODPC).

1. Lawful Basis & Information We Collect

We collect and process personal data solely for legitimate business purposes, contract fulfillment (delivering your orders), and regulatory compliance. This includes:

• Identity & Contact Information: Full name, recipient phone number, email address, physical delivery address, and Kenyan county/sub-county.
• Transaction & M-Pesa Metadata: M-Pesa receipt codes, transaction amounts, timestamps, and payment statuses. Note: We never have access to or store your M-Pesa secret PIN or credit card security codes.
• Technical & Session Data: IP addresses, browser cookies, and device identifiers used strictly to maintain secure cart sessions, remember preferences, and prevent fraudulent abuse.

2. How Your Data Is Used

Your information is utilized strictly to:

1. Process, invoice, and physically deliver your health and wellness orders across Kenya.
2. Send SMS and email order confirmation notices, M-Pesa STK payment verifications, and courier dispatch waybill updates.
3. Provide responsive customer support and coordinate with courier partners (e.g. Fargo Courier, Wells Fargo, G4S, and designated city dispatch riders).
4. Comply with statutory tax reporting mandates under the Kenya Revenue Authority (KRA).

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Data is shared exclusively with necessary operational processors under strict non-disclosure obligations: licensed telecommunications partners (Safaricom M-Pesa API gateways) and accredited delivery couriers carrying your parcel.

4. Data Security & Storage

Our platforms implement enterprise-grade Transport Layer Security (TLS 1.3), AES-256 database tokenization, and strict multi-tenant access controls. Administrative access to customer details is restricted to verified personnel and monitored via immutable audit logs.

5. Your Statutory Rights Under Kenyan Law

Under Section 26 of the Kenya Data Protection Act 2019, you retain the right to:

• Request access to all personal data we hold about you.
• Request prompt correction of inaccurate, outdated, or incomplete details.
• Request erasure of your data where retention is no longer legally necessary.
• Object to processing for marketing or promotional announcements at any time.

To exercise your rights or contact our designated Data Protection Officer, please email privacy@betterhealthsolutions.co.ke or visit our Nairobi offices.