Privacy Policy

1. Introduction

Welcome to LollaPay, a digital payment platform operated by Lolla Technologies Ltd

We are committed to protecting your personal data and respecting your privacy in accordance with the laws of the Republic of Kenya, including the Data Protection Act, 2019.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use LollaPay.

2. Scope of Policy

This policy applies to:

• Website users
• Mobile app users
• Merchants (business users)
• Customers making payments

It covers all services provided via LollaPay.

3. Information We Collect

a) Personal Information

• Full name
• Phone number
• Email address
• National ID / Passport details
• Business registration details (for merchants)

b) Financial & Transaction Data

• Payment details (mobile money, bank references)
• Transaction history
• Billing information

c) Technical Data

• IP address
• Device information
• Browser type
• Usage behavior

d) Location Data

We may collect approximate location data for fraud prevention and compliance.

4. How We Use Your Information

We use your data to:

• Process payments and transactions
• Provide and improve our services
• Verify identity (KYC compliance)
• Detect and prevent fraud
• Comply with legal and regulatory obligations
• Communicate service updates and support

5. Legal Basis for Processing

We process your data based on:

• Your consent
• Contractual necessity
• Legal obligations under Kenyan law
• Legitimate business interests

6. Sharing of Information

We may share your data with:

a) Payment Partners

Including mobile money providers like M-Pesa

b) Financial Institutions

Banks and payment processors

c) Regulatory Authorities

Including the Central Bank of Kenya and law enforcement agencies where required

d) Service Providers

Cloud hosting, analytics, and support services

We do NOT sell your personal data.

7. Data Retention

We retain your data:

• As long as your account is active
• As required for legal and regulatory compliance
• For dispute resolution and fraud prevention

After this period, data is securely deleted or anonymized.

8. Data Security

We implement industry-standard safeguards:

• Encryption (in transit and at rest)
• Secure servers and infrastructure
• Access controls and authentication

However, no system is 100% secure.

9. Your Rights (Under Kenyan Law)

Under the Data Protection Act, 2019, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Withdraw consent

To exercise your rights, contact us at the details below.

10. Cookies & Tracking Technologies

We use cookies to:

• Improve user experience
• Analyze platform usage
• Enable essential functionality

You can manage cookies via your browser settings.

11. International Data Transfers

Your data may be processed outside Kenya where necessary.

In such cases, we ensure:

• Adequate data protection safeguards
• Compliance with Kenyan regulations

12. Third-Party Links

Our platform may contain links to third-party websites.

We are not responsible for their privacy practices.

13. Children’s Privacy

LollaPay is not intended for individuals under 18 years.

We do not knowingly collect data from minors.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Updates will be posted on this page with a revised “Last Updated” date.

Continued use constitutes acceptance.

15. Contact Information

Email: sales@lollapay.com

Website: https://www.lollapay.com/