Privacy Policy

Effective 18 October 2026. Version 2026-10-18.

This policy explains how Edhanse handles personal information about you, the people who use Suds for your business, and your customers.

Information about you and your staff

We collect: names, phone numbers and roles; PINs and passwords, stored only in hashed form; the devices you enrol, their names, app versions and the keys they sign with; IP addresses and records of sign-ins and requests; your business details and invoices; messages you send to our support; and a record of what each person does in Suds, kept in your activity log.

We use it to provide and secure Suds, to bill you, to support you, to keep the activity log you rely on, to prevent fraud and misuse, to meet our legal duties, and to improve Suds. Our lawful bases are the performance of our contract with you, our legitimate interest in running and securing Suds, and legal obligations.

Information about your customers

Your customers' names, phone numbers, vehicles, visits, payments and messages are your data. We process them only on your behalf, as section 4 of our Terms of Service describes, and you are responsible for telling your customers how you use them.

Sharing

We share personal information only with the providers listed in section 4.5, to run Suds; with professional advisers under a duty of confidence; and where the law, a court or a regulator requires it. We do not sell personal information.

How long we keep it

We keep information for as long as your account is open and then as section 4.8 describes. Records we must keep by law, such as invoices, are kept for as long as the law requires, which for tax records is at least five years.

Your rights

Under the Data Protection Act, 2019, you have the right to be told how your information is used, to access it, to have it corrected or deleted, to object to its use, and to have it moved. Your staff and customers can exercise their rights through you, and we will help. To exercise a right, write to [email protected]. If you are unhappy with how we handle your information, you may complain to the Office of the Data Protection Commissioner.

Contact

Edhanse, [email protected].

Processing of personal data in connection with this website

W.1 In connection with any access to or use of the website at edhanse.com (the "Website"), Edhanse, acting as data controller within the meaning of the Data Protection Act, 2019 (the "Act"), collects and processes the following categories of personal data: (a) technical and usage data, comprising the pages accessed, the referring page or uniform resource locator, the viewport dimensions of the accessing device, the language preference expressed, and an approximation of the country and locality from which access is made, the latter being derived from the Internet Protocol address of the accessing device by means of a third-party geolocation service to which such address is disclosed for that sole purpose; and (b) such data as a data subject elects to submit through the request form on the Website, namely name, telephone number, business name and type, location, preferred mode of contact, any accompanying note, and the Internet Protocol address from which the submission is made.

W.2 The Website causes the browser of the accessing device to retain, by means of local storage, a randomly generated pseudonymous visitor identifier, the language preference selected and, for a period not exceeding thirty (30) days, a reference to any campaign link through which access was obtained. No advertising or third-party tracking cookies are deployed. A data subject may at any time remove such stored data by means of the settings of the relevant browser, without prejudice to the functionality of the Website.

W.3 The data described in clause W.1(a) is processed for the purposes of measuring the performance of the Website and of the channels through which it is accessed, and of improving the Website, on the lawful basis of the legitimate interests of Edhanse in the operation and improvement of the Website, which interests are not overridden by the interests, rights or freedoms of the data subject. The data described in clause W.1(b) is processed for the purposes of responding to the request and of establishing the services requested, on the lawful basis that such processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.

W.4 The Website is delivered by Cloudflare, Inc., and submissions through the request form are verified by Cloudflare Turnstile for the purpose of preventing automated abuse; such processing may occur outside the Republic of Kenya, subject to the safeguards required by Part VI of the Act. Communications initiated by a data subject through WhatsApp are governed by the terms and policies of the provider of that service.

W.5 Where access to the Website is obtained through a link issued to a partner of Edhanse, Edhanse may notify such partner that the link resulted in a visit, a request or a registration, by reference solely to a randomly generated identifier. No name, telephone number or other directly identifying data is disclosed to any such partner. Edhanse does not sell personal data, nor disclose the data described in this section to advertisers.

W.6 A data subject may exercise in respect of the data described in this section each of the rights conferred by section 26 of the Act and described above, by written request addressed to [email protected] identifying the telephone number used, if any.

W.7 The Website is directed to businesses and is not intended for use by any person under the age of eighteen (18) years. Edhanse does not knowingly collect personal data relating to any such person.