Let's NduthisLet's Nduthis

Privacy Policy

Version 2026-05-27 · Last updated 27 May 2026

This policy applies to all users of Let's Nduthis — riders, dealers, mechanics, and visitors. Please read it together with our Terms of Service.

1. Who we are

Let's Nduthis ("we", "us", "the Platform") operates an online marketplace and rider services platform in Republic of Kenya. This Privacy Policy explains how we collect, use, store, and share personal data when you use our website, apps, and related services.

2. Data we collect

We may collect:

  • Account data: name, email, phone, county, role, profile photo.
  • Garage and listing data: bike details, photos, prices, descriptions.
  • Transaction data: orders, M-Pesa references, escrow status (when enabled).
  • Communications: in-app marketplace messages, support enquiries, notifications.
  • Technical data: device type, IP address, logs, cookies for session security.
  • Dealer shop data: business name, location, WhatsApp Business number, opening hours.

3. Why we use your data

  • Provide marketplace listings, checkout, wallet, and messaging features.
  • Verify dealers, prevent fraud, and moderate chats for off-platform abuse.
  • Send service notifications (orders, test rides, subscriptions).
  • Comply with law, respond to regulators, and enforce our Terms.
  • Improve the product through analytics and security monitoring.

4. Sharing

We share data with other users as needed to complete transactions (e.g. buyers see seller shop details; sellers see buyer messages). We use processors for hosting, email, M-Pesa (Safaricom Daraja), and AI features under contractual safeguards. We do not sell personal data. We may disclose data if required by Kenyan law or court order.

5. Retention & security

We retain data while your account is active and as needed for legal, tax, and dispute resolution purposes. Marketplace chat logs may be retained for moderation and audit. We apply reasonable technical and organisational measures; no system is 100% secure.

6. Your rights

Under the Kenya Data Protection Act, 2019, you may request access, correction, deletion, or restriction of processing, subject to legal exceptions. Contact us via the email on the Platform. You may lodge a complaint with the Office of the Data Protection Commissioner.

7. Children

The Platform is not directed at persons under 18. We do not knowingly collect data from minors.

8. Changes

We may update this policy. Material changes will be posted on this page with a new version date. Continued use after changes constitutes notice.