Privacy Policy for eKanisa

1. Introduction

Rich Cloud Solutions Ltd. ("we", "us", or "our") is an ICT company dedicated to providing innovative solutions exclusively to churches in Kenya. With over 400 churches using our services, we prioritize your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data in compliance with the Data Privacy Act Kenya, 2019 and the General Data Protection Regulation (GDPR).

2. Information We Collect

When you register for our services, particularly the eKanisa product/service, we may collect the following information:

• Name
• Email address
• Phone number
• Any additional information necessary for service provision

3. Use of Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services.
• To contact you regarding updates and progress related to the services we offer.
• To send newsletters and promotional content if you subscribe to them.

4. Consent

You have the option to access a demo and a 14-day trial of our eKanisa service without registering. If you choose to subscribe, we assure you that our services will be delivered to the best of our ability.

5. Security Measures

We are committed to ensuring the security of your personal information. Our security measures include:

• Data Encryption: AES-128 cipher in Cypher Block Chain mode and SHA512 HMAC authentication.
• SSL Protection: All network communications are secured using SSL protocols.
• Two-Factor Authentication: Clients can enable two-factor authentication for additional security.
• Daily Backups: Data is backed up daily in two locations: locally on our main server and internationally in Amsterdam.
• Robust Support Team: Our support team is available 24/7 to address any security threats and assist with issues.

6. Data Sharing and Disclosure

We will not sell or disclose your personal information to any third parties without your explicit consent. We may share your data with trusted third-party service providers to enhance our service delivery, including but not limited to SMS and payment processing (e.g., Mpesa API).

7. User Responsibilities

To maintain the security of your account:

• Create strong passwords (at least 6 characters with at least 1 special character).
• Regularly update your passwords.
• Ensure that sessions expire after 5 minutes of inactivity.

8. User Education

We actively educate our users about best practices in data security and the implications of new updates on system security.

9. Compliance

Rich Cloud Solutions Ltd. complies with all applicable laws and regulations regarding data protection. We are committed to upholding your rights under the GDPR and ensuring your data privacy.

10. Enforcement and Contact Information

If you believe we have not adhered to this Privacy Policy, please contact us at [email protected]. We will investigate and address any issues promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website with an updated effective date.