Privacy Policy

  1. About this Notice

This Privacy Notice provides information on how GRAAB collects and processes your personal data when you visit our website or mobile applications. It outlines how we handle your personal data, ensure its security, and explains your rights concerning your personal data.

  1. Who we are

GRAAB is a leading pan-African e-commerce platform. Our platform comprises a marketplace connecting sellers with consumers, a logistics service for package shipment and delivery, and a payment service for facilitating transactions in selected markets.

  1. The data we collect about you

Personal data refers to information that can directly or indirectly identify a specific individual. We collect personal data to offer tailored products and services and continually improve our offerings. The data we collect may include:

A. Information you provide to us: Identity data, contact data, biometric data, delivery address, and financial data, such as contact details, demographic information, online registration details, payment information, responses to surveys, and marketing preferences.

B. Information we automatically collect/generate or obtain from third parties: Information about your device, usage of our websites and apps, personal preferences, interests, and geographic location, such as name, age, device details, web page visits, product searches and views, and social media profile information.

  1. Cookies and other Identifiers

We use cookies to enhance your browsing experience. For more information, please read our Cookie Notice.

  1. How We Use Your Personal Data

We use your personal data to operate, provide, develop, and improve our products and services. This includes registering you as a customer, processing orders, managing relationships, enabling participation in promotions and surveys, recommending/advertising products or services, and more.

  1. Legal basis for the processing of Personal Data

We process your personal data based on consent, legitimate business interests, performance of a contract, or compliance with the law.

  1. How We Share Your Personal Data

We may share your data with third parties for product/service delivery, working with service providers, business transfers, fraud detection, and compliance with legal obligations. We ensure their adherence to data protection terms and restrict their use of your data.

  1. International Transfers

We may transfer your personal data to locations in another country, ensuring appropriate protection measures and compliance with local laws.

  1. Data Retention

We retain your data for the necessary period to fulfill the purposes outlined in this Privacy Notice, as required by law, and for any applicable limitation period.

  1. Data Security

We have implemented security measures to prevent unauthorized access, alteration, or disclosure of your personal data.

  1. Your Legal Rights

You have rights under data protection laws, including access, correction, erasure, objection, restriction, data transfer, and unsubscribing from emails and newsletters. You can permanently delete your data by closing your account.

  1. Data Controllers & Contact

If you have questions or concerns about GRAAB's Privacy Notice or wish to exercise your legal rights, please contact the Data Privacy Officer at info@graab.co.ke we respond to all substantiated complaints within prescribed timelines.