Privacy policy

Primefix Kenya () is the data controller for personal data collected through this service. Contact us about privacy at 0700 099 026.

• Name and phone number: to create your account, sign you in by SMS code, send updates and match your payments to you. Basis: performing our contract with you.
• Addresses, directions and location pins: so the courier can collect and return your device. Your phone’s location is recorded only at the moment you confirm a handover, as evidence of where it happened. Basis: contract.
• Device details, IMEI or serial number and photos: to identify your device and record its condition at every handover. Basis: contract and our legitimate interest in preventing disputes and fraud.
• Device passcode, only if you choose to share it: to test the repair. Encrypted, shown only to the technician working on your device and deleted when the job closes. Basis: your consent, which you can withdraw by not sharing it.
• Payment records (amounts, Paystack references, receipt numbers, invoices): to account for payments and meet tax obligations. Basis: legal obligation.
• Messages, quotes, ratings and disputes you send in the app. Basis: contract.
• Cookie choices and basic technical data (browser type, a hashed IP address): to keep the service secure and prove your consent choices. Basis: legal obligation and legitimate interest.
• How you found us: if you allow analytics cookies, which website or search brought you here (for example Google or Instagram), kept with your booking or order; and, if you choose to answer, what you tell us when we ask how you heard about us. We use it to know which pages and ads work, and count visits by source without identifying you. Basis: your consent.
• Your language (English or Kiswahili), so the site and your messages are in it. Basis: contract.
• Your choice of WhatsApp or SMS for updates, and when and how you made it. Basis: your consent, which you can withdraw in your account or by replying STOP.

• TumaBoda, our courier: your name, phone number, pickup or delivery address and directions, and a short description of the item, for each delivery; the rider sees your name and number to find you. TumaBoda handles this under its own privacy policy.
• Paystack, our payment processor: your email address, the amount and what it pays for. You enter your M-Pesa number or card on Paystack’s own page, which we never see. Paystack handles this under its own privacy policy.
• Our SMS provider (Africa’s Talking): your phone number and message text, to send codes and updates.
• Meta (WhatsApp), only if you ask for your updates on WhatsApp: your phone number and the text of each update, sent from our WhatsApp Business number. Meta processes messages under WhatsApp’s terms, which may be outside Kenya. Sign-in codes always go by SMS.
• Our booking-platform supplier and its hosting and storage providers, which process data on our behalf under a written data processing agreement.
• Anyone you send a progress link to: the device, where the repair is and the technician’s updates (and the prices, if you choose), never your photos, codes or address. You can stop a link at any time.
• Authorities, where the law requires us to.

Our database is hosted in a secure data centre. Photos and invoices are kept in private cloud storage that may be located outside Kenya. Where data is transferred outside Kenya we rely on the safeguards required by section 48 of the Data Protection Act, including contractual protections with our providers. Photos are never public: they are shown through links that expire after a few minutes.

• Device photos: deleted 90 days after your job closes.
• Passcodes: deleted as soon as the job closes.
• Invoices, payment records and job history: at least five years, as Kenyan tax law requires.
• Cookie consent records: for as long as needed to prove consent, and at most five years.
• Your account: until you ask us to delete it, subject to the records we must keep.

Under the Data Protection Act you may ask to be informed about, access, correct or delete your personal data, object to or restrict its use, receive a copy in a portable format, and withdraw consent at any time. Contact us at 0700 099 026. We respond within the time the law allows.

If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Access to your data is limited to the staff who need it; every staff action on a job is logged; passcodes and integration credentials are encrypted; and each shop’s data is kept separate from every other shop’s at the database level.

We use only the cookies listed below. Strictly necessary cookies are required for the service to work and do not need consent. Optional analytics or marketing cookies are used only if you allow them, and you can change your choice at any time.

The only analytics cookie is rd_src, which remembers which website or search brought you here, and it is set only after you allow analytics. We set no marketing cookies. Withdrawing your consent deletes rd_src. We keep a record of each choice you make (the time, the choice and a hashed IP address) to demonstrate consent, as the Act requires.

Cookie settings

The service is intended for adults. If a child’s device needs repair, a parent or guardian should make the booking.

We will post any changes here with a new date, and ask for your consent again where the law requires.