Privacy Policy
Last updated: 19 February 2026
1. Who we are
M-KUWA is a trading name of M-KUWA Ltd, a company registered in England and Wales. We are the data controller responsible for your personal data. If you have questions about this policy or your data, please contact us at mkonde@mkuwa.com.
2. Data we collect
We may collect the following categories of personal data:
- Identity data: name, email address, company name.
- Contact data: email address, phone number.
- Technical data: IP address, browser type, operating system, and usage data collected through cookies and similar technologies.
- Trust Score data: financial and behavioural signals used to generate Trust Scores, collected only with explicit user consent.
- Communications data: correspondence you send to us, including demo request form submissions.
3. How we use your data
We process your personal data for the following purposes:
- To respond to your enquiries and demo requests.
- To provide, operate, and improve our Trust Score services.
- To generate and deliver Trust Scores to partner organisations, only with your explicit consent.
- To comply with legal obligations under applicable UK and Kenyan law.
- To protect our legitimate interests, including fraud prevention and service security.
4. Legal basis for processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:
- Consent: for generating and sharing Trust Scores with partners.
- Legitimate interests: for responding to enquiries, improving our services, and ensuring security.
- Legal obligation: where we are required to process data to comply with applicable law.
- Contract performance: where processing is necessary to fulfil our contractual obligations to you or our partners.
5. Data sharing
We share personal data only in the following circumstances:
- With partner organisations: Trust Score outputs (score, band, indicators) are shared only with your explicit, purpose-bound, and time-bound consent. Partners do not receive raw transaction data unless explicitly agreed.
- Service providers: we may share data with trusted third-party processors who assist in operating our services, under appropriate contractual safeguards.
- Legal requirements: where required by law, regulation, or legal proceedings.
6. International transfers
As our services operate between the United Kingdom and Kenya, your personal data may be transferred internationally. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO) or other lawful transfer mechanisms under the UK GDPR.
7. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted or anonymised.
8. Your rights
Under the UK GDPR, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your personal data where there is no compelling reason for its continued processing.
- Restriction: request restriction of processing in certain circumstances.
- Portability: request transfer of your data in a structured, commonly used, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at mkonde@mkuwa.com.
9. Cookies
Our website may use cookies and similar technologies to improve your browsing experience and analyse site usage. You can manage cookie preferences through your browser settings.
10. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
11. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.