Legal

Privacy Notice:

KISANI (“we/us”) strives to maintain the highest standards of confidentiality and to respect the privacy of our customers (“you”) and associated individuals who deal with us. Our commitment to privacy includes being transparent about the nature and extent of the processing of personal data that we undertake. This Privacy Notice aims to inform you about how we collect, store, use and disclose information about you when you:

a) interact with or use our websites; or

b) use any of our products, services or applications (collectively the “Services”) in any way.

Our aim is to be as consistent as possible, comply with all applicable laws and apply the highest standards of privacy laws to our approach.

Categories of personal data we process or collect:

We collect and process personal data that you provide when you interact with us, whether online or by email, mobile, telephone or post.

This personal data may include the following:

a) First name and last name;

b) Postal address;

c) Email address;

d) Phone number;

e) Gender, date of birth;

f) Country of residence, nationality, language preference;

g) Unique identification information (e.g. your username or customer number and password);

h) Financial information (e.g. payment card or bank account information);

i) Which businesses or merchants you visit, as part of your KISANI benefits;

j) Certain details provided by your device such as IP address, device ID, device type and location data.

Source and categories of personal data:

The source of the above information comes from you or, we may receive the information from our partners. The category of information is Personal Data. The information is used only for business purposes to provide the Service.

Why we use your personal data and our legal basis for doing so:

We must have a legal basis to process your personal data. In most cases, it will be our responsibility to provide the contracted service.

Sharing and transfer of personal data:

We will not share or sell your personal data to anyone unless you agree, or such sharing is necessary to fulfill our contract with you, or we are legally permitted or required to do so. In addition, your personal data will only be shared with selected organizations that comply with our security procedures and policies.

The organizations with whom we may share your personal data include:

a) Another member of our group of companies where they help us provide or improve our services to you;

b) Third party service providers and subcontractors: We employ other companies and individuals to perform other functions on our behalf. Examples include customer service and data analysis. They help us provide our services to you. This is provided under a written contract where personal data is only processed for the specific business purpose of providing the service to you. Service providers are prohibited from selling the personal data we provide to them under the contract;

c) Businesses or merchants that you visit, as part of your program benefits, so that they can record and account for your visit;

d) A regulator or other authority where we need to comply with a regulatory or legal obligation;

e) Fraud prevention where necessary to protect our legitimate interests;

f) Partners or customers with whom we offer or engage in joint marketing activities;

g) With your consent: other than as set out above, you will receive notification when information about you may be shared with third parties, and you will be given the opportunity to choose not to share that information.

Some of these organisations may be based in a country where different data privacy laws apply. We will only transfer your personal data to that country if it ensures an adequate level of protection for your rights and freedoms, or if that organisation is contractually bound to respect the European Economic Area data protection law using EU approved standard contractual clauses.

Protection and storage of personal data:

We process your personal data in accordance with adequate and reasonable procedures and technologies to maintain and protect its security, availability, confidentiality and integrity, and to prevent its unlawful or unauthorized processing, accidental loss or damage, from collection to destruction.

When personal data is transmitted over the internet, it will be encrypted.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of your personal data, you are responsible for keeping this password confidential. We ask that you do not share your password with anyone.

Disposal and retention of personal data:

We will only keep your personal data for as long as necessary for the purposes for which it was collected and we will delete from our systems any personal data that is no longer necessary.

We will only retain your personal data for as long as necessary and for a specified and limited purpose, where we are required to do so and in accordance with our retention policies, in order to comply with a regulatory or legal obligation.

Cookies:

We use cookies as identifiers on our website to enhance your user experience by enabling our website to 'remember' you, either for the duration of your visit (using a 'session cookie') or on repeat visits (using a 'persistent cookie'). We may also use cookies to enable us to tailor our services or products based on, for example, your location and/or browsing habits or to provide the service of the website to enable you to purchase our products. With your consent, we use third-party identifier cookies to help personalize advertisements for you by sharing them with advertisers.

You can block or disable non-essential cookies either by using our cookie management tool or by using your browser.

Your Rights:

If you wish to access, review, update, rectify and delete any personal data we hold about you, or exercise any other data subject rights, you can email us at contact@kisani.co. Our Privacy Team will review your request and respond to you as soon as possible.

Please note that we may still use aggregated and anonymized personal data that does not identify any individual. We may also retain and use your information as necessary, for example to comply with our legal obligations, resolve disputes and enforce our agreements.

The Right to Information:

You have the right to object to the processing of your personal data in certain situations.

The Right to Access:

Subject to certain exceptions, you have the right to obtain confirmation as to whether or not we are processing your personal data, and if we do, request access to your data.

The right to rectification:

If the personal data we process is incomplete or incorrect, you have the right to request at any time that it be completed or corrected.

The right to erasure:

Subject to certain exceptions, if you consider that we should stop processing some or all of your personal data, you have the right to request its erasure. However, there may well be reasons why immediate erasure may not be possible (for example where retention is necessary to meet legal or regulatory obligations).

The right to restrict processing:

You have the right to request that we restrict the processing of your personal data in certain situations:

a) If you contest the accuracy of your personal data, you can request that their processing be restricted while we verify its accuracy

b) If the processing of your personal data is considered unlawful, but you do not need it the deletion of your personal data

c) If we no longer need the data for the purposes of their processing, but you need them for the establishment, exercise or defense of legal claims

d) If you object to our processing of your data on the basis of our legitimate interests

The right to data portability:

Where processing takes place on the basis of your consent or a contract and is carried out

by automated means, you have the right to request that e we provide your personal information given in a machine-readable format.

Your rights regarding automated decision-making and profiling:

You have the right to object to decisions based exclusively on automated processing of your personal data.

The right to withdraw your consent:

If your personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise your rights, you can contact us by contacting the data protection officers from the information provided in the "Contact details" section of this privacy statement.

Once we receive your request, members of our data protection team will endeavour to contact you as soon as possible to confirm receipt. Where we use service providers to hold your personal data, there is a process in place to also handle the data subject's right request.

Our website may contain links to other sites:

We may have links to other sites that promote our partners and clients. These links may direct you to other companies that have their own privacy notices and our privacy notice will not cover their use of data. They may collect additional information, so we encourage you to review the privacy notices of the linked sites.

Business Transfers

We may choose to buy or sell assets and may share or transfer customer information in connection with the evaluation of those transactions. Additionally, if we, or our assets, are acquired, or if we go out of business, enter bankruptcy, or undergo some other change in control, personal data may be among the assets transferred or acquired by a third party.

Security

We use appropriate technical, organizational, and administrative security measures to protect all information we hold in our records from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We have written procedures and policies that are regularly audited, and audits are reviewed at the next level.

Contact Information

To exercise any of your rights, or if you have any questions about our Privacy Notice, or if you wish to make a complaint about our use of your personal data, or if you wish to report a security issue, please contact us via contact@kisani.co

Children's Information

We do not knowingly collect or solicit personal data from anyone under the age of 18. If you are under 18, please do not attempt to register for our services or send us any personal data about yourself. If we learn that we have collected personal data from a child under 18, we will delete that information as quickly as possible. If you believe that a child under 18 may have provided us with personal data, please contact us as soon as possible.

Automated decision-making or profiling

We do not carry out any profiling or processing related to automated decision-making activity.

Changes to our policy

We regularly review our privacy notice and will publish new versions on our privacy notice page on our website. This privacy notice was last updated on 1 January 2024.