Privacy Policy

QUANTEDGE LIMITED is a software technology company incorporated under the laws of Kenya (Companies Act, Cap 486). We develop and operate cloud-based enterprise software solutions including Point of Sale systems, ERP platforms, e-commerce engines, and related technology services. Our registered office is in Kenya and our website is accessible at quantedgeltd.com.

This Privacy Policy is governed by and construed in accordance with the Kenya Data Protection Act, 2019 (No. 24 of 2019) and its subsidiary legislation, including the Data Protection (General) Regulations, 2021. We adhere to the General Data Protection Regulation (GDPR) as a supplementary standard.

We collect personal data or business data based on the service rendered • (e.g., name, email, address, payment processors, etc).

We process your personal data on the following lawful bases under Section 30 of the Kenya Data Protection Act, 2019: • Contract Performance: To provision and maintain the software services you subscribe to. • Legal Obligation: To comply with tax laws (Income Tax Act, VAT Act), anti-money laundering regulations, and directives from the Communications Authority of Kenya. • Legitimate Interests: To improve our products, detect fraud, and secure our systems. • Consent: For marketing communications and non-essential cookies (which you may withdraw at any time). We do not sell your personal data to third parties.

We share data only where necessary with: • Cloud Infrastructure Providers: Our hosting partners process data under strict data processing agreements. • Payment Processors: Safaricom (M-Pesa), card networks, and banking partners for transaction processing. • Regulatory Authorities: The Kenya Revenue Authority (KRA), ODPC, or law enforcement where legally compelled. All third-party processors are bound by contractual obligations consistent with the Kenya Data Protection Act, 2019.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by Kenyan law. Transaction records are retained for a minimum of seven (7) years in compliance with the Tax Procedures Act, 2015. Account data is retained for the duration of your subscription and for two (2) years thereafter unless a longer period is legally mandated.

Under the Kenya Data Protection Act, 2019, you have the right to: • Access: Request a copy of the personal data we hold about you. • Rectification: Request correction of inaccurate or incomplete data. • Erasure: Request deletion of your data where no legal obligation requires its retention. • Restriction: Object to or restrict certain processing activities. • Data Portability: Receive your data in a structured, machine-readable format. • Withdraw Consent: At any time, for consent-based processing. To exercise your rights, contact us at [email protected]. We will respond within thirty (30) days as required by law.

Our products uses essential cookies for functionality and, with your consent, analytics cookies to understand how visitors use our platform. You may manage cookie preferences through your browser settings or our cookie consent tool. Disabling non-essential cookies will not affect your ability to use our core services.

We implement industry-standard technical and organisational measures to protect your data, including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, regular penetration testing, and SOC 2-aligned operational practices. In the event of a data breach affecting your rights, we will notify the ODPC within seventy-two (72) hours and affected individuals without undue delay.

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our website at least fourteen (14) days before taking effect. Continued use of our services after the effective date constitutes acceptance of the revised Policy.

For privacy-related queries: QUANTEDGE LIMITED Data Protection Officer Email: [email protected] Website: quantedgeltd.com If you are dissatisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.