Privacy Notice

This Privacy Notice will inform you how OYE Platform Solutions Limited  (hereafter “we” or “us”) will process Personal Data belonging to subscribers and users of the OYE App (hereafter “you”) The OYE App is a loyalty points tracking application  which tracks subscriber’s purchases of products from our select partner outlets. These purchases make you eligible for loyalty points. The loyalty points can then be converted into products. 

This privacy notice will apply to you if you have signed up as an OYE Customer . In order to properly understand your rights as a data subject you are advised to familiarise yourself with this data notice.

What data do we process?

In order to enable your registration and continued subscription to the OYE loyalty program   we  will process the following personal data:

Biographical Information:

    Full name;

Next of Kin information.

Government-issued Document Information:

Passport or National ID number.

Contact Information:

Phone number;.

Transaction Information:

Product bought;

Amount transacted;

Time of transaction;

Location of transaction.

.

Information about your Motorcycle:

Motor Cycle Registration Number;

Motor Cycle Model.

SACCO information;

Whether you are registered to a Transport SACCO;

The name of the Transport SACCO.

Why do we process personal data?

Personal Data is processed in order to issue you with a subscription to our loyalty program and in order to provide you with the services we offer and give you access to our products.

Biographical Information:

Biographical information, including full name and date of birth, is requested in order  to verify your identity and ensure that you are an adult capable of entering an agreement. We collect your next of kin information in the event that we need to contact them in relation to an incident involving you. 

Government Issued Document Information:

This is collected in order to verify your identity to enable us provide you with our services.

Contact Information:

Contact information  is collected for communication between us and you so that we may send you notifications relating to your OYE subscription. It can also be used as an alternative means of identification this is because your phone number will be used to identify you as a subscriber on our platform.

Transaction information:

This is collected so that we can offer our services to you. As a loyalty points program the products you qualify for are purchased with loyalty points that you accumulate from purchasing certain products from our partners. It is necessary for us to keep track of these details to ensure that we are aware when you have qualified for our products.

SACCO Information

We gather information relating to which SACCO you are a member of to confirm compliance with government directives on the operation of a Boda Boda Motorcycle.

Our Legal Basis for collecting and processing personal data

We will process personal data from you based on the following legal justifications:

In order to provide you with the services:

In order to create and maintain your profile on our loyalty points program we will require personal data that allows us to identify you . This will allow us to verify from which user a transaction occurs and properly allocate loyalty points.

To pursue our legitimate interests.

We may use your personal data in order to satisfy our legitimate interests or the lawful or legitimate interests of a third party requesting access to your personal data. In all such cases we will ensure that your rights are protected and that the purpose to which the data is being put is reasonable and closely related to the purposes for which you supplied it.

Consent to collect the personal data.

Note that in order to onboard you to our loyalty points program   it will be necessary for us to process your personal data. This is necessary in order to provide you with the service. Kindly familiarise yourself with the legal bases laid out above for processing of personal data.

For the purposes of historical or statistical research.

We may use your personal data in order to conduct research or carry out analysis relating to the financial inclusivity, purchase of products, and location of purchase. We will anonymise your data before doing this.

What are your rights as a Data Subject?

The following are your rights as a Data Subject submitting data to  us:

To access information about the use to which your personal data is to be put, this is contained in this notice; 

To access all your personal data in our custody  this can be accessed through your profile on our loyalty points program and  will be provided to you upon request through our customer care line upon verification of your details.

To object to the processing of all or part of your personal data, note that we may be unable to provide you certain services related to the OYE loyalty program if you object to processing of personal data; 

To correction of false or misleading data.

To  the deletion of false or misleading data about you; and

To  the access of this Policy.

In order to exercise your rights of objection to data processing, correction of false data, and deletion of false or misleading data kindly call 0111969696 in order to make your request known. You will be required to verify your identity in order to receive assistance as requested. Any request made to us will be responded to within fourteen days and you will be informed whether the request can be effected and what additional information may be required.

Who may receive your data

We may share your data with our partners in order to verify transactions carried out by you.

We will share your data with our insurance partner in order to enable issuance of an insurance policy in your name.

We may share your data with our partners in order to make you eligible for prizes.

We may use your data in order to develop further financial products that we offer to you.

We may share your personal data if compelled to do so by the precepts of any law, court order, or other legal obligation to the Government of Kenya.

We may share your information with third party service providers but only to the extent necessary for them to provide a necessary service to us and after making sure we have the necessary contractual safeguards to ensure that  your data will be protected in the same manner that we would protect it.

Under no circumstances will we sell or rent your data to third parties for any purpose whatsoever.

No information that you provide to us will be used to market any product or service to you.

Data Retention

We will  retain your personal data for a period of seven (7) years as required by the Section 46 of the Proceeds of Crime and Anti-Money Laundering Act 9 of 2009.

Data Protection

We have set up internal systems and processes to ensure that your data is protected. Our cybersecurity protocol is constantly tested and updated to keep up with the latest developments in the field and to ensure that all potential threats are addressed before becoming a reality.

Varying levels of encryption are applied to your data and access control is given in a manner that only allows people who need your data for official purposes such as providing a service access to it.

We will regularly run penetration tests on our systems and update them in line with the latest technology and emerging threats to ensure that your personal data is secure.

Customer Care

In order to receive any assistance in regards to the exercise of your rights as a data subject you can reach out to our data protection offices on 0111969696.

You can lodge a complaint about the processing of your personal data through the contact information above. Upon receipt of a complaint we shall contact you within seven (7) days in order to assist you resolve the complaint.

Changes to the Policy

The Policy may be updated from time to time in line with changes in law and best practices on data protection around the world. In the event that this happens the date on which the policy is updated will also change to enable you confirm when changes are made.

This Policy was last updated on 31st January, 2024