Privacy Policy

1. Information We Collect

We collect information you give us, information created when you use the platform, and limited technical information.

• Account details: name, email, phone number and password.
• Profile details: skills, experience, location/counties, certificates and photos.
• Verification details: identity document images and the details extracted from them.
• Activity: jobs posted or applied to, matches, messages and preferences.
• Technical: device, browser, IP address and cookies (see our Cookie Policy).

2. How We Use Your Information

We use your information to run and improve Blue Kola.

• Create and secure your account and sign you in.
• Match workers and jobs, and power search results.
• Verify identity where you choose to be verified.
• Enable messaging and notifications between users.
• Process M-Pesa payments for Boost and verification.
• Provide support, prevent fraud and keep the platform safe.

3. Our Basis for Processing

We process your data to perform our agreement with you, to meet legal obligations, for legitimate interests such as safety and fraud prevention, and, where required, with your consent.

4. Sharing Your Information

We do not sell your personal data. We share it only as needed:

• With other users, to the extent your profile and settings allow.
• With service providers who host the platform, store files and send email.
• With Safaricom/Daraja to process M-Pesa payments.
• With authorities where the law requires it.

5. Cookies & Tracking

We use cookies and similar technologies to keep you signed in and to understand how the platform is used. You can control non-essential cookies from the Cookie Policy page or the cookie banner.

6. How Long We Keep Data

We keep your information while your account is active and for as long as needed to provide the service, meet legal, tax and security requirements, and resolve disputes. When no longer needed, we delete or anonymise it.

7. Security

We use encryption in transit (TLS), encrypted storage, access controls and monitoring to protect your data. No system is completely secure, so please use a strong password and keep your details up to date.

8. Your Rights

Under the Kenya Data Protection Act you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, where applicable.
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent where processing relies on consent.

9. Children

Blue Kola is for people aged 18 and over. We do not knowingly collect data from children.

10. International Transfers

Some of our service providers may store data outside Kenya. Where this happens, we require appropriate safeguards in line with the Data Protection Act.

11. Changes to This Policy

We may update this Policy. Material changes will be posted here with a new date.