Privacy Policy for Yuccahub Africa WhatsApp Services

1. Introduction

Yuccahub Africa ("we," "us," or "our") is committed to protecting your privacy and handling your personal data responsibly in accordance with the Kenya Data Protection Act, 2019, Meta’s WhatsApp Business Terms of Service, and applicable laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you interact with our automated WhatsApp messaging services powered by the WhatsApp Business API (e.g., reminders, updates, notifications, and customer support).

By using our WhatsApp services (e.g., by sending messages to our official number +254 710 371 507 or opting in), you consent to the practices described in this Policy.

2. Information We Collect

When you interact with our WhatsApp service, we may collect the following types of personal data:

• Contact Information: Your phone number (as your WhatsApp identifier) and WhatsApp display name.
• Message Content: The content and history of messages you send to and receive from our official WhatsApp number.
• Technical and Interaction Data: Delivery status, read receipts, timestamps, device type indicators (if available via API), and other metadata related to your interactions.

We do not collect sensitive personal data (e.g., health, financial, or biometric information) through these services unless explicitly required for a specific purpose and with your clear consent.

3. How We Use Your Information

We process your personal data lawfully, fairly, and transparently for the following purposes:

• To deliver automated reminders, updates, notifications, and other messages via our cron-based system.
• To provide customer support, respond to your inquiries, and handle service-related communications.
• To analyze usage patterns and improve our software services, features, and overall user experience.
• To comply with legal obligations, enforce our rights, and adhere to Meta’s WhatsApp Business Terms of Service and policies.

We limit data use to what is necessary (data minimization) and retain it only as long as required for these purposes or as mandated by law.

4. Data Storage, Security, and Retention

We implement reasonable and industry-standard technical, organizational, and administrative security measures (including encryption in transit via the WhatsApp Business API) to protect your data against unauthorized access, loss, alteration, or disclosure.

Your data is stored securely on our servers (or those of trusted cloud providers) and is accessible only to authorized personnel under strict confidentiality obligations.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy or to meet legal, regulatory, or contractual obligations. After that period, data is securely deleted or anonymized.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information.

We may share your data only in these limited circumstances:

• With Meta Platforms, Inc.: As required to operate through the WhatsApp Business Cloud API (Meta acts as a separate controller/processor under its own policies).
• Service Providers: With trusted third-party vendors (e.g., cloud hosting, database management) that help us deliver the service, under strict data processing agreements ensuring confidentiality and security.
• Legal Requirements: When required or permitted by Kenyan law, court order, or to protect our rights, safety, or property (or that of our users or the public).

Any international transfers (e.g., to Meta or cloud providers) are done with appropriate safeguards as required by the Kenya Data Protection Act.

6. Your Rights Under the Kenya Data Protection Act, 2019

As a data subject, you have the following rights (subject to applicable limitations and verification):

• Right to be Informed: To know how your personal data is collected, used, and processed.
• Right of Access: To request confirmation of whether we hold your data and to obtain a copy of it.
• Right to Rectification: To request correction of inaccurate, incomplete, or misleading data.
• Right to Erasure (Right to be Forgotten): To request deletion of your data when it is no longer necessary or lawfully processed.
• Right to Object: To object to processing of your data (e.g., for direct marketing or automated messages).
• Right to Withdraw Consent: Where processing is based on consent (you can opt out of messages anytime).

How to Exercise Your Rights: Reply "STOP" or "UNSUBSCRIBE" to our WhatsApp number to immediately cease receiving automated messages. For access, rectification, erasure, or other requests, contact us using the details in Section 7. We will respond within the timelines required by law (typically promptly and no later than required under the Act or General Regulations).

7. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact our Data Protection Contact:

• Email: info@yuccahub.com
• Website: https://www.yuccahub.com
• Address: Nairobi, Kenya

We may update this Privacy Policy from time to time. Changes will be posted here with an updated "Last Updated" date.