Legal
Privacy Policy
How Zedlify collects, uses, and protects your information.
Zedafrica ("Zedafrica," "we," "us," or "our") operates Zedlify, a software-as-a-service order management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use Zedlify, and describes the rights available to you under the Kenya Data Protection Act, 2019 ("Kenya DPA"), the EU/UK General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"), where applicable.
By using Zedlify, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Information We Collect
We collect the following categories of information when you register for, configure, and use Zedlify:
a. Account & business information
- Name, email address, phone number, and job title
- Business name, business address, and business registration details
- Login credentials (passwords are stored using industry-standard hashing)
b. Payment & billing information
- Billing name and address
- Subscription plan, invoice history, and transaction records
- Payment card or mobile money details, processed directly by our payment processors (Zedlify does not store full card numbers)
c. Customer order data
As an order management system, Zedlify processes order data that our customers (businesses) input or sync into the platform on behalf of their own end customers, including:
- End-customer names, phone numbers, delivery addresses, and order details
- Order status, fulfillment, and payment confirmation records
d. Usage & analytics data
- Log data such as IP address, browser type, device identifiers, and access timestamps
- Feature usage, clickstream, and in-app activity data
- Diagnostic and performance data (crash reports, load times)
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including order processing and account management
- Process payments and manage subscriptions and billing
- Communicate with you about updates, support, and service-related notices
- Monitor usage, diagnose technical issues, and improve platform performance
- Detect, prevent, and address fraud, abuse, or security incidents
- Comply with legal obligations and enforce our Terms of Service
- With consent, send product updates or marketing communications, which you may opt out of at any time
3. Legal Basis for Processing
Where the GDPR applies, we rely on the following legal bases:
| Basis | When it applies |
|---|---|
| Contractual necessity | Processing needed to provide the Service under our Terms |
| Legitimate interests | Product improvement, fraud prevention, and analytics, balanced against your rights |
| Consent | Marketing communications and non-essential cookies |
| Legal obligation | Tax, accounting, and regulatory recordkeeping |
4. How We Share Information
We do not sell personal information. We may share information with:
- Service providers who process data on our behalf (see Section 5)
- Business customers who use Zedlify, with respect to end-customer order data they manage on the platform
- Professional advisors such as auditors, lawyers, and accountants, under confidentiality obligations
- Regulators or authorities where required by law, court order, or to protect our legal rights
- A successor entity in the event of a merger, acquisition, or asset sale, with notice to affected users
5. Third-Party Service Providers
We engage the following categories of trusted third parties to help operate Zedlify. These providers are contractually bound to protect your data and use it only for the purposes we specify.
| Provider type | Examples | Purpose |
|---|---|---|
| Payment processing | Stripe, Paystack | Processing subscription payments and transactions |
| Cloud hosting & infrastructure | Amazon Web Services (AWS) | Hosting application data and infrastructure |
| Analytics | Google Analytics | Understanding usage patterns to improve the Service |
6. Cookies & Tracking Technologies
Zedlify uses cookies and similar tracking technologies to operate the web application and understand how it is used. This includes:
- Essential cookies — required for login sessions and core functionality
- Analytics cookies — used via tools such as Google Analytics to understand feature usage and improve the Service
- Preference cookies — remember your settings and display preferences
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
7. International Data Transfers
Zedafrica is based in Kenya. As we use global infrastructure providers such as AWS, your information may be transferred to and processed in countries outside Kenya, including the United States and the European Union, which may have different data protection laws. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms to protect your data in these transfers.
8. Data Retention
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Account and order data is generally retained for the duration of your subscription plus a reasonable period afterward, unless a longer retention period is required by law (for example, tax and financial recordkeeping). You may request earlier deletion, subject to Section 10–12 below.
9. Data Security
We implement technical and organizational measures designed to protect your information, including encryption in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights — Kenya Data Protection Act
If you are located in Kenya, under the Kenya DPA you have the right to:
- Be informed of the use of your personal data
- Access your personal data held by us
- Request correction or deletion of inaccurate or misleading data
- Object to the processing of your personal data
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya
11. Your Rights — GDPR (EEA / UK Residents)
If you are located in the European Economic Area or the UK, you have the right to:
- Access, rectify, or erase your personal data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with your local data protection supervisory authority
12. Your Rights — CCPA (California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information, subject to certain exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information (Zedafrica does not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise any rights described in Sections 10–12, contact us using the details in Section 14. We may need to verify your identity before processing your request.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date, and where changes are material, we will provide additional notice (such as an email or in-app notification).