Privacy Policy & Data Protection Notice
Version 2026-08-13 | Effective: 13 August 2026
1. Introduction
Ecobeam Solutions Limited ("GroupBuy", "we", "us") respect your privacy and are committed to protecting your personal data in accordance with the Data Protection Act of Kenya. This notice explains how we process your information when you use the GroupBuy Android application and website.
2. Data We Collect & Purpose
Identity & Eligibility: We collect your first name, second name, and Date of Birth (DOB). DOB is used strictly to verify you are 18+ years of age and to comply with commercial regulations.
Contact Details: Your email address and Kenyan phone number are required for account security, M-Pesa processing, and order updates.
Financial & Transactional: We record M-Pesa transaction metadata, order history, and payment status to fulfill your purchases and comply with tax audit requirements.
Analytics & AI: We log product interest. Crucially: we do not persist raw user search strings. We only log "matched" catalog metadata (e.g., that a user was interested in a specific product category) to improve inventory through Google Gemini AI analysis.
3. Android Permissions Appendix
The GroupBuy Android application requires the following permissions to function:
- INTERNET & NETWORK ACCESS: To connect to our secure Firebase backend and process real-time deals.
- CAMERA: Used only by administrators to capture product photos for catalog listings and by the AI scanner to analyze item details.
- NOTIFICATIONS: To alert you when a deal reaches MOQ, payment is required, or your order has arrived.
4. International Processing & Infrastructure
Your data is stored and processed using Google Cloud / Firebase infrastructure. This may involve the transfer of data outside of Kenya to secure data centers globally. We ensure all processors maintain high security standards (e.g., App Check and TLS encryption).
5. Data Retention & Account Deletion
- Active Accounts: We retain your profile data while your account is active.
- Deletion: You can request account deletion within the app. Upon request, we hard-delete your profile, names, phone, and notifications.
- Retention: Financial records (Orders) are retained for 7 years in an anonymized form to comply with Kenyan tax laws. These records are stripped of all PII.
6. Your Rights
Under the Data Protection Act, you have the right to access, rectify, or erase your data, and the right to object to processing. You may withdraw optional marketing consent at any time without affecting your access to the marketplace.
7. Contact Information
For privacy inquiries, contact our Data Protection Office at:
Email: ecobeamke@gmail.com
Phone: +254 720 408 110
Address: Nairobi, Kenya