Who is responsible
Galfini Limited, Nairobi, Kenya, operates Karibu ID and is responsible for the personal data it processes, under the Data Protection Act, 2019 of Kenya.
What we hold
Details of the people who use Karibu ID (name, work email, role); the names and roles of directors and owners found in public and official records about the organisations we check; and the details you give us when you enquire or make a request.
What we never hold
Photographs of faces, copies of identity documents, biometric data, or bank and mobile-money statements beyond the name and date we read from a proof of company control before erasing it.
Why we use it
To check organisations at their own request, to let them share their record with the readers they choose, to notify their directors and owners, to answer enquiries, and to meet our legal obligations.
Who sees it
A record is shared only with the readers the organisation chooses, for the purpose it names, while the share is live. Every read is recorded and shown to the organisation.
How long we keep it
For as long as the organisation’s record is in use, and then for the periods the law requires. Counsel is confirming the exact periods.
Your rights
You can ask what we hold about you, ask us to correct or erase it, object to how we use it, or ask a person to review an automated step.