Privacy Policy
Effective date: March 5, 2026
This Privacy Policy explains how MILIKI ("we", "us", "our") collects, uses, discloses, and protects personal data when you use our website, applications, and services (collectively, the "Services"). We aim to comply with the Kenya Data Protection Act, 2019, and applicable regulations.
If you are using MILIKI on behalf of a company, that company is the data controller for the personal data you input into the Services, and MILIKI acts as a data processor for that data.
1. Data We Collect
- Account data: name, email, phone number, role, and authentication details.
- Company data: company name, address, billing details, and configuration settings.
- Tenant and property data: tenant contact details, property records, lease terms, and payment history.
- Transaction data: payment references, amounts, dates, and payment method details.
- Usage data: log data, device data, IP address, and service usage metrics.
- Support data: messages, tickets, or other communications with support.
2. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
- Contract: to provide the Services and fulfill our contractual obligations.
- Legal obligation: to comply with Kenyan law and regulatory requirements.
- Legitimate interests: to secure and improve the Services and prevent fraud.
- Consent: where required, such as for marketing communications.
3. How We Use Data
- Provide and maintain the Services, including account management and billing.
- Process transactions and send payment confirmations.
- Send service notifications, security alerts, and administrative messages.
- Improve product performance, analytics, and user experience.
- Comply with legal obligations and respond to lawful requests.
4. Data Sharing
We may share data with trusted service providers who support our Services, including:
- Payment processors and mobile money gateways.
- SMS, email, and communication providers.
- Cloud hosting, storage, and security providers.
- Professional advisers or regulators where required by law.
We do not sell personal data.
5. Data Retention
We retain personal data only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the type of data and legal requirements.
6. Your Rights
Under the Kenya Data Protection Act, you may have the right to:
- Be informed about the processing of your personal data.
- Access your personal data and request a copy.
- Request correction of inaccurate or incomplete data.
- Request deletion or restriction of processing, where applicable.
- Object to processing based on legitimate interests.
- Withdraw consent where processing is based on consent.
- Request data portability, where applicable.
To exercise these rights, contact us using the details below.
7. Cross-Border Transfers
Where data is transferred outside Kenya, we implement appropriate safeguards to ensure adequate protection in line with the Kenya Data Protection Act.
8. Security
We implement technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. However, no system is entirely secure.
9. Cookies
We use cookies and similar technologies to provide functionality, analyze usage, and improve the Services. You can manage cookie preferences through your browser settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates on this page and update the effective date above.
11. Contact Us
Vobits Limited Data Protection Contact
Email: support@miliki.ke
Location: Nairobi, Kenya