Privacy Policy

Introduction

This Privacy Policy ("Policy") governs the collection, use, and protection of personal and business information by Citrus Labs Limited ("the Company") through the CarPal Platform Administrator account ("Platform"). This Policy complies with the Kenya Data Protection Act, 2019, and other applicable laws as of 2025. By accessing or using the Platform, you consent to the practices described herein.

Scope of the Policy

Who This Policy Applies To:

Authorized employees of Citrus Labs Limited using the CarPal Platform Administrator account.

What This Policy Covers:

Information collected during account registration, use of the Platform, and interactions with the Company.

Information We Collect

Personal Data:

• Full Name
• Work Email Address
• Staff ID
• Contact Details (e.g., phone number, office address)

Platform Usage Data:

• Login timestamps
• IP addresses
• Device information
• Activities performed on the Platform

Cookies and Tracking Data:

Information collected through cookies and similar technologies to enhance Platform functionality.

How We Use Your Information

Primary Uses:

• Verifying your identity and employment status
• Providing access to the Platform and its features
• Ensuring compliance with company policies and legal obligations

Analytics and Improvements:

• Analyzing usage trends to improve Platform performance
• Identifying and addressing technical issues

Communication:

Sending notifications, updates, and essential communications related to your account.

Sharing of Information

Internal Sharing:

Information may be shared within Citrus Labs Limited for operational purposes.

Third-Party Service Providers:

Certain data may be shared with trusted third-party service providers for technical support, analytics, or compliance purposes. All third parties must adhere to strict confidentiality and data protection standards.

Legal Compliance:

Information may be disclosed to comply with legal obligations, respond to legal requests, or protect the Company's rights and interests.

Data Security

Security Measures:

The Platform employs encryption, firewalls, and access controls to protect your information.

User Responsibilities:

You are responsible for safeguarding your login credentials and ensuring secure access to the Platform.

Data Breach Notification:

In the event of a data breach, affected users will be promptly notified, as required by Kenyan law.

Data Retention

Retention Period:

Information is retained for as long as necessary to fulfill the purposes outlined in this Policy or as required by law.

Deletion Requests:

Users may request data deletion by contacting the Company. Such requests will be evaluated in compliance with legal obligations.

User Rights

• Access and Correction: Users have the right to access and request corrections to their personal information.
• Data Portability: Users may request a copy of their data in a portable format.
• Objection to Processing: Users may object to certain types of data processing, subject to legal exceptions.
• Complaint Resolution: Users may lodge complaints with the Office of the Data Protection Commissioner (ODPC) in Kenya.

Cookies Policy

Use of Cookies:

Cookies are used to enhance user experience and gather usage statistics.

User Control:

Users can disable cookies through browser settings; however, this may limit certain functionalities of the Platform.

Policy Updates

Amendments:

Citrus Labs Limited reserves the right to update this Policy. Users will be notified of significant changes.

Effective Date:

This Policy is effective as of January 2025.

Contact Information

For inquiries about this Privacy Policy, contact Citrus Labs Limited:

• Email: privacy@citruslabs.co.ke
• Phone: +254-700-000-000
• Address: Citrus Labs Limited, Nairobi, Kenya