Using this website or Pretium’s payment services means you agree to this policy. If you do not agree, do not use the website or the services. We may update this policy. If you keep using the website or the services after we publish a change, the updated policy applies. Please review this page from time to time.
See also our Terms of Use.
1. Information we collect
We may collect:
- Your name, email address, phone number, and similar contact details.
- Records of your contact with us, including customer care queries, complaints, and email correspondence.
- Account information, account status, transaction history, payment details, mobile money details, and bank account details needed to collect or send a payment.
- Communication preferences, including any direct marketing choices you give us.
- Usage information about the website and API, including information generated to fix errors.
2. Legal bases
We, and service providers acting for us, use the information above on these bases:
- Your consent.
- Where processing is needed to perform your contract with us.
- Where processing is needed to meet a legal or regulatory duty.
- Where processing is needed for our legitimate interests, or those of a service provider.
Where we rely on legitimate interests, we will not process your information for that purpose if your interests or fundamental rights should override those interests.
3. Sources of data
We generally collect personal information directly from you or from the business that uses our API, for example when an account is opened or when a collection or payout is submitted.
4. Recipients of data
We may disclose personal information described above to:
- Providers who perform services for us or for you, such as professional advisers, auditors, insurers, and outsourced technology providers, including providers that check information against sanctions or denied-party lists.
- Mobile money and bank partners that need the details to complete a transfer.
- Government, regulatory, and law enforcement authorities when the law requires it.
5. Retention
We keep personal information for as long as we need it to provide the service. How long we keep a record can depend on the type of data, the country where we collected it, the kind of user, the purpose of collection, and whether the law requires us to keep it after an account is closed.
6. Information we need from you
Some information is required so we can meet legal duties, including identification details we need for customer due diligence and anti-money laundering checks before we provide payment services. If we do not receive that information, we may be unable to open or keep an account, or to complete a payment.
7. Cross-border transfers of personal data
If we transfer personal information outside the country where we collected it, we do so lawfully and expect the recipient to protect it under the rules that apply to the transfer.
We operate from Kenya and the United States. If we send information to a provider in another country for hosting, identity checks, fraud prevention, or another legitimate purpose, we rely on the safeguards required by applicable law and use reasonable security measures.
By submitting personal information, you acknowledge that it may be transferred, stored, and processed as described in this policy.
8. Your rights
Subject to the conditions and limits in applicable law, including the Kenya Data Protection Act where it applies, you may have the right to:
- Ask for a copy of the personal information we hold about you and how we use it.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete personal information we hold about you.
- Ask us to restrict or stop certain processing, or object to processing for a particular purpose.
- Ask for a copy of your information in a structured, commonly used, machine-readable format, or ask us to send it to another organisation where the law provides that right.
- Withdraw consent where we rely on consent, including for marketing.
These rights are not absolute. For example, we may need to keep payment records where the law or a legitimate reason requires it.
9. Data security
Protecting payment and account information is part of how we operate. We use commercially reasonable measures, which can include firewalls, access controls, and encryption, and we use secure transmission when handling sensitive data.
We cannot guarantee that an accident or an unauthorised act by a third party will never expose information. No method of transmission or storage is completely secure.
10. Information sharing
We may share information we collect so we can provide the service, prevent and investigate fraud, or respond to other criminal activity. Recipients are required to protect the information in line with this policy. They can include:
- Fraud prevention and identity verification providers, who may use the information only for those purposes and to improve those services.
- Operational providers for financial, legal, and technical support, payment processing, and related services.
- Marketing providers, only with your consent. You can withdraw that consent at any time.
- Law enforcement, regulators, and other authorities when required by law, or in good faith where disclosure is needed to prevent harm, financial loss, or a breach of our terms.
- A buyer or successor if the business is sold, merged, or reorganised. We will tell you if the policy that applies to you changes.
- Affiliates that need the information to provide the service you asked for.
- Other parties only with your direction or consent, unless the law allows the disclosure without it.
Inside Pretium, access is limited to people who need it for compliance, customer support, and verification. We do not sell or rent your personal information.
11. Indemnity
By agreeing to this policy, you release Pretium Technologies Ltd and its officers, directors, employees, affiliates, agents, and representatives from claims, liabilities, and reasonable costs that arise from sharing information as this policy describes, from a breach of this policy by you, or from a breach of confidentiality you owe under it. This release continues after your relationship with us ends.
To the extent the law allows, Pretium is not liable for indirect, special, punitive, or consequential damages, including loss of use, data, business, or profit, even if we knew such damage was possible. Nothing in this policy limits liability that cannot legally be limited.
12. Complaints
If you are unhappy with how we have used your information or handled a request, email hello@pretium.co.ke.
Pretium Technologies Ltd
CPA Centre, next to KCA University, Nairobi, Kenya
131 Continental Dr, Suite 305, Newark, DE 19713, United States