Privacy Policy
Quick Navigation
Introduction
At Stemfard, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API services, visit our website, or interact with us.
By using our services, you agree to the collection and use of information in accordance with this policy. We are dedicated to complying with applicable data protection laws and regulations, including the Kenya Data Protection Act, 2019, and the GDPR for our users in the European Union.
We believe in transparency and give you control over your data. This policy is designed to be clear, concise, and easy to understand.
Information We Collect
We collect information to provide and improve our API services. The type of information we collect depends on how you interact with us:
Personal Information
- Full name and contact details
- Email address and phone number
- Physical address
- Account credentials
- Profile information
Technical Information
- IP address and browser type
- Device information
- Usage data and analytics
- Cookies and tracking technologies
- Log data and performance metrics
Service Information
- API usage patterns and endpoints
- Request and response data
- Integration history
- Error logs and debugging data
- Rate limit and quota usage
Payment Information
- Billing address
- Payment method details
- Transaction history
- Invoice records
- Subscription information
We do not collect sensitive personal information such as government IDs, health data, or biometric information unless explicitly required and with your consent.
How We Use Your Information
We use your information for legitimate business purposes. Here's how:
Service Delivery
Providing and managing API services
Communication
Responding to inquiries and support requests
Improvement
Enhancing services and user experience
Security
Monitoring and protecting against threats
Marketing
Sending relevant updates (with consent)
Analytics
Understanding usage patterns and trends
Legal Basis for Processing
We process your personal information under the following legal bases:
Contract Performance
Processing necessary for the performance of our service agreement with you.
Legitimate Interests
Processing necessary for our legitimate business interests, including security and analytics.
Consent
Processing based on your explicit consent, which you can withdraw at any time.
Legal Obligation
Processing necessary to comply with applicable laws and regulations.
Information Sharing
We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:
Service Providers
With trusted third-party vendors who assist us in operating our business, hosting our infrastructure, and providing our services.
Legal Requirements
When required by law, regulation, or legal process to protect our rights or comply with legal obligations.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity with appropriate safeguards.
With Your Consent
When you have given us explicit permission to share your information with specific third parties.
Data Security
We implement enterprise-grade security measures to protect your data:
Encryption
All data encrypted in transit (TLS 1.3+) and at rest (AES-256)
Access Control
Role-based access control and zero-trust architecture
Security Audits
Regular third-party security assessments and penetration testing
Infrastructure
ISO 27001 certified data centers with 24/7 physical security
Authentication
Multi-factor authentication and API key management
Monitoring
Real-time threat detection and 24/7 security monitoring
All data is hosted on ISO 27001 and SOC 2 certified infrastructure with 99.95% uptime SLA.
Your Rights
Under applicable data protection laws, you have the following rights:
Right to Access
Request a copy of your personal information
Right to Rectification
Correct inaccurate or incomplete information
Right to Erasure
Request deletion of your personal information
Right to Object
Object to processing of your information
Right to Restrict
Restrict processing of your information
Right to Portability
Transfer your data to another provider
To exercise any of these rights, please contact us using the information below.
Cookies
We use cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device to:
- Remember your preferences and settings
- Understand how you use our services
- Improve performance and functionality
- Provide relevant content and updates
You can control cookies through your browser settings. However, disabling cookies may affect the functionality of certain features.
International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses approved by regulatory authorities
- Data Processing Agreements with all third-party service providers
- Compliance with GDPR and Kenya Data Protection Act requirements
- Regular security audits and assessments
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to remove that information from our servers.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by:
- Posting the new policy on this page
- Sending an email notification to registered users
- Updating the "Last Updated" date at the top of this page
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:
Phone
+254 721 462 424Address
Britam Tower, 24th Floor
Hospital Road, Upperhill
Nairobi, Kenya
Hours
Mon-Fri: 9:00 AM - 5:00 PM
Sat: 9:00 AM - 1:00 PM
Sunday: Closed