Summary: We collect only what we need to run the platform, connect students with gigs, and process M-Pesa payments. We do not sell your data.
1. Introduction
Campus Pesa operates at campuspesa.co.ke. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the Kenya Data Protection Act, 2019. By using the platform you accept this policy.
2. Information We Collect
Provided by you
- Full name, university email, phone number, university, course, year of study
- Profile photo, bio, skills, portfolio links
- M-Pesa phone number for payouts (we do not store your PIN)
- Messages, support tickets, contact form submissions
- Student ID or verification email for enrolment confirmation
Collected automatically
- Pages visited, gigs browsed, actions taken, time on platform
- IP address, browser type, device OS
- Cookies — see our Cookie Policy
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contractual necessity |
| Matching you with gigs | Contractual necessity |
| Processing M-Pesa payouts | Contractual necessity |
| Sending platform notifications | Legitimate interest |
| Marketing communications | Consent |
| Preventing fraud | Legitimate interest |
| Legal compliance | Legal obligation |
4. Sharing Your Information
We do not sell, rent, or trade your data. Sharing is limited to:
- Clients: Your name, university, and skills are visible when you apply. Phone and email are never shared directly.
- Service providers: Safaricom (M-Pesa), cloud hosts, analytics — all under strict data processing agreements.
- Legal obligations: Where required by Kenyan law or court order.
We will never: sell your data to advertisers, share your M-Pesa number with clients, or disclose your student ID to unauthorised parties.
5. Data Retention
- Active accounts: data retained for account lifetime plus 2 years
- M-Pesa transaction logs: 7 years (Kenyan financial regulations)
- Deleted accounts: personal data removed within 30 days
6. Your Rights
Under the Kenya Data Protection Act you have the right to: access, correct, delete, port, and object to processing of your data. Email hello@campuspesa.co.ke with subject “Data Rights Request”. We respond within 30 days.
7. Data Security
- TLS/SSL encryption for all data in transit
- Encrypted storage for sensitive fields
- Role-based access controls
- Regular security audits and vulnerability assessments
- Incident response with mandatory 72-hour breach notification
8. Children’s Privacy
Campus Pesa is for persons aged 18+ enrolled in accredited Kenyan tertiary institutions. If you believe a minor has registered, contact us immediately.
9. Changes to This Policy
Material changes will be notified via email or in-platform notification at least 14 days before taking effect.
10. Contact
- Email:hello@campuspesa.co.ke
- Phone:0723 999 000
You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
Need help understanding this policy?
Our team is happy to clarify anything in plain language.
hello@campuspesa.co.ke · 0723 999 000 · Contact page →