J-Uza Green Solutions Marketplace|Privacy Policy

Legal

Privacy Policy

Effective Date: 27 June 2026 | Last Updated: 27 June 2026

1. Introduction

App Town Technologies Ltd ("we", "us", "our"), operator of the J-Uza Green Solutions Marketplace at www.j-uza.com, is committed to protecting the privacy and personal data of all individuals who interact with our platform.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have in relation to your data. It applies to all users of j-uza.com including buyers, solution providers, visitors, and newsletter subscribers.

This policy is prepared in compliance with the Kenya Data Protection Act No. 24 of 2019 ("DPA"), the Kenya Data Protection (General) Regulations 2021, and other applicable data protection laws. Where J-Uza processes data from individuals in the European Union or United Kingdom, we also comply with the General Data Protection Regulation (GDPR) and UK GDPR as applicable.

By using j-uza.com, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are — Data Controller

The data controller responsible for your personal data is:

Company: App Town Technologies Ltd
Trading as: J-Uza Green Solutions Marketplace
Address: Tabere Crescent, 734A, Nairobi, Kenya 00505
Email: support@j-uza.com
Website: www.j-uza.com

As data controller, we determine the purposes and means of processing your personal data. Our payment processor, Paystack Payments Kenya Limited, acts as a data processor on our behalf for payment-related data, subject to their own privacy policy available at paystack.com.

3. Personal Data We Collect

3.1 Data You Provide Directly

We collect personal data that you provide to us when you:

Register an account or create a buyer profile — name, email address, phone number, location
Submit a solution provider application — name, organisation, email, phone, solution details, certification documents
Complete a sustainability assessment — business name, sector, energy and operational data
Purchase a sustainability report — name, email, payment information
Contact us via support@j-uza.com or our contact form — name, email, message content
Subscribe to our newsletter or Academy updates — name and email address
Request a demo from a solution provider — name, email, phone, organisation

3.2 Data Collected Automatically

When you visit j-uza.com, we automatically collect certain technical data including:

IP address and approximate geographic location
Browser type and version
Device type and operating system
Pages visited, time spent on pages, and navigation path
Referral source — how you arrived at j-uza.com
Date and time of access

This data is collected through cookies, server logs, and similar technologies. Please see Section 9 (Cookies) for more detail.

3.3 Payment Data

Payment transactions on J-Uza are processed by Paystack Payments Kenya Limited. We do not store your card details, M-Pesa PIN, or full payment credentials on our servers. Paystack collects and processes payment data in accordance with their privacy policy and PCI-DSS standards. We receive transaction confirmation and reference data only.

3.4 Data from Third Parties

We may receive personal data about you from third parties including:

Solution providers who submit your contact details as part of a demo or inquiry request
Analytics providers who help us understand how the platform is used
Payment processors who provide transaction confirmation data

4. How We Use Your Personal Data

We use your personal data only for the purposes set out below and only where we have a lawful basis to do so under the Kenya Data Protection Act and applicable law.

4.1 To Operate the Platform

Process and manage buyer accounts and solution provider applications
Facilitate connections between buyers and verified solution providers
Deliver sustainability assessment reports purchased through the platform
Process payments and manage transactions through Paystack
Provide customer support and respond to enquiries

Lawful basis: Performance of a contract / legitimate interests

4.2 To Verify Green Credentials

Review and validate sustainability certifications and impact data submitted by solution providers
Maintain records of verified providers for platform integrity

Lawful basis: Legitimate interests / legal obligation

4.3 To Communicate with You

Send transactional emails including order confirmations, report delivery, and account notifications
Send the J-Uza newsletter and Green Business Academy updates where you have subscribed
Notify solution providers of application status, listing updates, and policy changes

Lawful basis: Consent (for marketing) / legitimate interests (for transactional communication)

4.4 To Improve the Platform

Analyse usage patterns to improve user experience and platform functionality
Conduct research and development on sustainability assessment tools
Monitor platform security and prevent fraud

Lawful basis: Legitimate interests

4.5 To Comply with Legal Obligations

Maintain records required under Kenyan tax, financial, and company law
Respond to lawful requests from regulators, courts, or law enforcement
Comply with Paystack's KYC and AML requirements as our payment processor

Lawful basis: Legal obligation

5. Who We Share Your Data With

We do not sell your personal data to third parties. We share personal data only in the following limited circumstances:

5.1 Payment Processors

We share necessary transaction data with Paystack Payments Kenya Limited to process payments. Paystack is our data processor and handles payment data under their own privacy policy and PCI-DSS compliance framework.

5.2 Solution Providers

When you submit a demo request or enquiry through J-Uza, your contact details (name, email, phone, organisation) are shared with the relevant verified solution provider to enable them to respond to your enquiry. By submitting a demo request you consent to this sharing.

5.3 Service Providers

We may share data with trusted third-party service providers who assist us in operating the platform, including hosting providers, email delivery services, and analytics tools. All such providers are contractually required to handle your data securely and only for the purposes we specify.

5.4 Legal and Regulatory Disclosure

We may disclose your personal data to regulators, courts, law enforcement, or other authorities where required by law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of App Town Technologies Ltd or the J-Uza platform, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and your rights in relation to it.

6. International Data Transfers

J-Uza serves buyers and solution providers in East Africa and the Gulf/UAE. Your personal data may be processed or stored in countries outside Kenya, including in the UAE, other East African countries, or countries where our service providers operate.

Where we transfer data outside Kenya, we ensure that appropriate safeguards are in place in accordance with the Kenya Data Protection Act, including contractual protections with receiving parties. Paystack may transfer payment data outside Kenya as described in their privacy policy.

By using J-Uza, you acknowledge and consent to the transfer of your personal data to other countries as described in this policy.

7. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are:

Buyer account data — retained for the duration of the account and for 3 years after account closure
Transaction and payment records — retained for 7 years as required by Kenyan tax law
Sustainability assessment data — retained for 5 years to support re-assessment and benchmarking
Solution provider application and verification records — retained for 5 years from the date of application
Marketing and newsletter subscriber data — retained until you unsubscribe or withdraw consent
Customer support correspondence — retained for 3 years from the date of resolution
Technical and log data — retained for 12 months

Where data is no longer needed, we securely delete or anonymise it.

8. Your Data Protection Rights

Under the Kenya Data Protection Act No. 24 of 2019, you have the following rights in relation to your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data
Right to Erasure: You have the right to request that we delete your personal data where there is no legitimate reason for us to continue processing it
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transfer it to another data controller
Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at support@j-uza.com. We will respond to all requests within 30 days. In some cases we may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies to operate and improve j-uza.com, remember your preferences, and understand how the platform is used.

9.2 Types of Cookies We Use

Essential cookies: Required for the platform to function, including session management and security. These cannot be disabled.
Analytics cookies: Help us understand how visitors use the platform so we can improve it. We use anonymised analytics data only.
Preference cookies: Remember your language, currency, and other settings between visits.
Marketing cookies: Used to track the effectiveness of our marketing where applicable. We will request your consent before placing these cookies.

9.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Note that disabling essential cookies may affect the functionality of j-uza.com. A full Cookie Policy is available on our website.

10. Children's Privacy

J-Uza is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child under 18 without appropriate consent, please contact us immediately at support@j-uza.com and we will take steps to delete such data.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

Encrypted data transmission using SSL/TLS technology
Access controls limiting personal data access to authorised personnel only
Regular security assessments of our platform and third-party providers
Payment data handled exclusively by Paystack under PCI-DSS standards

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Office of the Data Protection Commissioner in accordance with our legal obligations.

12. Third Party Links and Services

J-Uza may contain links to third-party websites, including solution provider websites and partner organisations. This Privacy Policy does not apply to third-party websites. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies before sharing personal data with them.

Demo requests and enquiries submitted through J-Uza will result in your contact details being shared with the relevant solution provider, who will process your data under their own privacy policy.

13. JUZA College of Business and Technology

J-Uza's Green Business Academy is operated under JUZA College of Business and Technology, a separate entity currently completing TVET accreditation in Kenya. Personal data collected in connection with Academy course registrations or interest forms is processed by App Town Technologies Ltd on behalf of JUZA College and is subject to this Privacy Policy. Once JUZA College is fully accredited and independently operational, a separate privacy notice for the College may be published.

14. Paystack and Payment Data

J-Uza processes payments through Paystack Payments Kenya Limited, licensed by the Central Bank of Kenya. When you make a payment on j-uza.com, you are subject to Paystack's own terms of service and privacy policy in addition to this policy. Paystack may collect, process, and store payment data including card details, M-Pesa numbers, and transaction history in accordance with their privacy policy and applicable financial regulations.

We receive only transaction confirmation and reference data from Paystack. We do not have access to your full card number, CVV, or M-Pesa PIN at any time.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify registered users by email and post a notice on j-uza.com with the updated effective date.

Your continued use of j-uza.com after the effective date of any update constitutes acceptance of the revised policy.

We encourage you to review this policy periodically. The current version is always available at www.j-uza.com/privacy.

16. Contact and Complaints

For any questions, requests, or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Email: support@j-uza.com
Address: Tabere Crescent, 734A, Nairobi, Kenya 00505
Website: www.j-uza.com/privacy

We aim to respond to all privacy-related enquiries within 30 days. If you are not satisfied with our response, you may lodge a complaint with:

Office of the Data Protection Commissioner of Kenya
Website: www.odpc.go.ke
Email: info@odpc.go.ke