Privacy Policy (Kenya Data Protection Act 2019)

This Privacy Policy describes how TUBENOSE LTD collects, stores, and protects personal and billing information in strict accordance with the Kenya Data Protection Act (KDPA) 2019.

1. Information Collection

When purchasing domain names (.co.ke, .ke, .com) or hosting packages, we collect client contact details (name, email, phone number, physical address) to comply with KENIC accreditation rules and ICANN WHOIS requirements.

2. M-Pesa & Payment Security

PataHost does NOT store raw M-Pesa PINs or credit card security codes. All payments are processed through encrypted, PCI-DSS compliant payment gateways with Safaricom Daraja API endpoints.

3. Your Data Rights

Under KDPA 2019, you retain the full right to access, rectify, or request the deletion of your personal records from our marketing databases at any time via our unsubscribe portal or support ticketing desk.