Data Protection Policy

In accordance with the Data Protection Act, 2019 (Kenya)

1. Commitment to Data Privacy

OneApp Limited ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. This policy outlines how we handle personal data in compliance with the **Data Protection Act, No. 24 of 2019** of the Laws of Kenya.

2. Data Processing Principles

We ensure that all personal data is:

  • Processed in accordance with the right to privacy of the data subject.
  • Processed lawfully, fairly, and in a transparent manner.
  • Collected for explicit, specified, and legitimate purposes.
  • Adequate, relevant, and limited to what is necessary.
  • Accurate and, where necessary, kept up to date.

3. Your Rights as a Data Subject

Under the Act, you have the right to:

  • Be informed of the use to which your personal data is to be put.
  • Access your personal data in our possession.
  • Object to the processing of all or part of your personal data.
  • Correction of false or misleading data.
  • Deletion of false or misleading data.

4. Security of Personal Data

We implement technical and organizational measures to prevent unauthorized access, disclosure, or destruction of data. This includes encryption, secure vaults for KYC documents, and rigorous access controls.

5. Contact Information

For any queries related to data protection or to exercise your rights, please contact our Data Protection Officer at **privacy@oneapp.co.ke**.