Privacy notice

This notice explains what personal data BomaFund collects and why. We aim to process personal data in line with Kenya's Data Protection Act, 2019.

What we collect

• Account details: name, email address, password (stored only as a secure hash) or your Google account identifier.
• Profile details you add: business information, investment preferences, documents you upload for review.
• Verification details: identity documents and the results of checks.
• Activity: sign-ins, invitations, NDA acceptances, document downloads and expressions of interest, kept as an audit trail.

Why we use it

• To run your account, review applications and make introductions.
• To show verified investors business profiles, and verified businesses investor profiles.
• To keep the service secure and meet legal obligations.

Who sees it

The BomaFund team sees everything needed to review and introduce. Investors see a business's name, story and documents only as described on each page and after any NDA. We use service providers for hosting, email and identity checks, under contracts that protect your data. We do not sell personal data.

How long we keep it

We keep account and audit records while your account is open and for as long afterwards as the law requires. You can ask us to close your account.

Your rights

You can ask to see, correct or delete your data, or object to its use, by emailing victorgichohi48@gmail.com.