Makao Limited ("Makao", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at autorentafrica.com and related mobile applications.
1. Information We Collect
1.1 Personal Information
When you register and use our platform, we may collect:
- Full name, email address, and phone number (+254 format)
- National ID or passport number for KYC verification
- M-Pesa phone number and PayBill/Till number details
- Property addresses and unit information
- Bank account details for payment reconciliation
- Company/business registration details (for property owners)
1.2 Transaction Data
We automatically collect payment-related information including:
- M-Pesa transaction confirmations and SMS records
- Bank transfer receipts and reconciliation data
- Rent payment history, receipts, and invoices
- Late fee calculations and outstanding balances
1.3 Usage Data
We collect analytics data including device type, browser information, IP address, pages visited, and feature usage patterns to improve our service.
2. How We Use Your Information
We use collected information for the following purposes:
- Providing and maintaining the Makao platform
- Automating payment matching and reconciliation
- Generating invoices, receipts, and financial reports
- Sending transactional notifications (SMS, email, WhatsApp)
- KRA tax calculations (VAT, withholding tax) and compliance
- KYC verification and fraud prevention
- Improving our services through analytics
- Customer support and communication
3. Kenya Data Protection Act 2019 Compliance
In accordance with the Kenya Data Protection Act 2019, we adhere to the following principles:
Lawfulness
Data processed lawfully and fairly
Purpose Limitation
Collected for specified, legitimate purposes
Data Minimisation
Adequate, relevant, and not excessive
Accuracy
Kept up to date; inaccurate data corrected or deleted
Storage Limitation
Kept only as long as necessary
Security
Protected against unauthorized processing, loss, or damage
4. Data Sharing & Disclosure
We do not sell your personal data. We may share information with:
- Payment Providers: Safaricom (M-Pesa), Equity Bank, KCB, Co-operative Bank — for payment processing and reconciliation
- SMS/Communication Providers: Africa's Talking — for transactional SMS and WhatsApp notifications
- Legal Authorities: When required by Kenyan law, court order, or regulatory bodies including KRA
- Service Providers: Cloud hosting and infrastructure providers under strict data processing agreements
5. Data Security
We implement robust security measures including:
- End-to-end encryption for sensitive data (AES-256)
- PCI DSS compliance for payment data processing
- Role-based access control with 6 permission levels
- Regular security audits and penetration testing
- Automated daily backups with point-in-time recovery
- Multi-factor authentication support
6. Your Rights
Under the Kenya Data Protection Act 2019, you have the right to:
- Access your personal data held by us
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Object to or restrict processing of your data
- Data portability — receive your data in a structured format
- Lodge a complaint with the Office of the Data Protection Commissioner
7. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. Financial and transaction records are retained for 7 years as required by KRA regulations. Upon account deletion, personal data is anonymized or deleted within 90 days, except where retention is required by law.
8. Cookies & Tracking
We use essential cookies for authentication and session management. Analytics cookies are used with your consent to improve our service. You can manage cookie preferences through your browser settings.
9. Contact Us
Data Protection Officer
Makao Limited
Nairobi, Kenya
📧 privacy@autorentafrica.com
📱 +254 700 000 000