Privacy Policy

1. Who We Are

Kolleti, Inc. is a private company based in Kenya that provides ticketing, event management, and fundraising tools to individuals, event organizers, and organizations. We are a registered Data Controller under Kenya’s Data Protection Act, 2019.

2. Information We Collect

We collect the following categories of data:

a. Personal Identification Information

• Full name
• Email address
• Phone number
• National ID or Passport number (where applicable)

b. Transaction and Financial Data

• Payment details (e.g., M-Pesa reference, masked card number)
• Ticket purchases and event history
• Fundraiser contributions

c. Event & Usage Data

• Events attended or created
• Interaction with the platform (e.g., clicks, page views)
• Communication with organizers

d. Technical Data

• Device type and operating system
• IP address and browser information
• Location data (if enabled)

3. How We Use Your Information

We use your personal data to:

• Create and manage your account
• Process ticket purchases and fundraising contributions
• Send event confirmations, reminders, and updates
• Enable communication between event organizers and attendees
• Offer support and resolve disputes
• Provide personalized content and suggestions
• Improve our platform and user experience
• Comply with legal obligations

4. Legal Basis for Processing

We only process your data where we have a lawful basis, including:

• Your explicit consent
• Fulfillment of a contract with you
• Legal obligations (e.g., taxation, anti-fraud measures)
• Our legitimate interests in improving services or ensuring security

5. How We Share Your Data

We may share your information with:

• Event organizers, to facilitate ticketing and event access
• Payment processors (e.g., M-Pesa, Flutterwave, Stripe)
• Service providers, such as cloud hosting and analytics platforms
• Regulatory bodies, if legally required to do so

We do not sell your personal information to third parties.

6. Data Transfers & Storage

Your data may be stored in Kenya or securely processed in other countries. When transferring data internationally, we implement safeguards like:

• Encrypted transfers
• Data processing agreements
• Standard contractual clauses (SCCs)

7. Data Retention

We keep your personal data only as long as necessary to:

• Provide services to you
• Comply with legal and tax requirements
• Resolve disputes or enforce agreements

Once no longer needed, we securely delete or anonymize the data.

8. Your Privacy Rights

Under Kenya’s DPA and other applicable laws, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise these rights, contact us at privacy@kolleti.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Improve platform performance
• Analyze usage patterns
• Remember user preferences
• Deliver relevant content and offers

You can manage your cookie settings through your browser or in-app settings.

10. Security

We apply robust security measures to protect your data, including:

• SSL encryption
• Regular vulnerability scans
• Role-based access control
• Data backup and disaster recovery protocols

However, no system is 100% secure. We encourage you to use strong passwords and secure your own devices.

11. Children’s Privacy

Our services are not intended for children under 18 without parental consent. If we discover that we have collected data from a minor without permission, we will delete it immediately.

12. Changes to This Privacy Policy

We may update this policy occasionally. If material changes are made, we will notify users via email or in-app notices. We encourage you to review this policy regularly.

13. Contact Us

For questions or privacy-related concerns, please reach out:

Kolleti, Inc.

‍