Privacy Policy
This Privacy Policy explains how Khala Technologies (“Khala”, “we”, “us”) collects, uses, stores, shares and protects personal data when you visit this website, create a Khala ID, or use any Khala product — Khala Pay, Khala POS, Khala Reports or Khala Radio (together, the “Services”). We process personal data in accordance with the Data Protection Act, 2019 (Kenya) and its regulations, and, where applicable, other laws governing our regulated services.
1. Who is responsible for your data
The data controller for this website and the Khala ID service is Khala Technologies (established by FSK Advisory), Rotterdam Mall, Kerarapon, Nairobi, Kenya. For Khala Pay, the licensed payment service provider entity is the controller of payment and compliance data. Our Data Protection Officer can be reached at info@fskadvisory.com, marked “Data Protection”.
2. What we collect
- Identity and contact data — name, phone number, email address, and, for Khala Pay business customers, the identification and business registration documents required by law.
- Khala ID and security data — sign-in identifiers, device identifiers, one-time passcode delivery records, and, where you enable it, a PIN or biometric verification performed on your own device. Biometric data itself never leaves your device and is not stored by Khala.
- Transaction and usage data — payment and payroll records (Khala Pay), sales and inventory records (Khala POS), reports and documents (Khala Reports), and broadcast, campaign and compliance records (Khala Radio).
- Technical data — IP address, browser type, pages visited and similar log information.
3. Why we process it
- To provide and secure the Services, including authenticating you through your Khala ID.
- To meet legal and regulatory obligations, including customer due diligence, sanctions screening and transaction monitoring that apply to regulated payment services.
- To operate our business — billing, support, service improvement and fraud prevention.
- To communicate with you about the Services and, with your consent where required, about new Khala products.
4. Legal bases
We rely on performance of a contract; compliance with legal obligations, including anti-money laundering and counter-terrorism financing laws; our legitimate interests in securing and improving the Services; and consent where the law requires it, which you may withdraw at any time.
5. Who we share it with
- Payment and infrastructure partners — mobile-money and banking partners, strictly to process the transactions you initiate.
- Regulators and authorities — including the Central Bank of Kenya, the Financial Reporting Centre and the Office of the Data Protection Commissioner, where the law requires or permits.
- Service providers — such as cloud hosting (Amazon Web Services) and messaging providers used to deliver one-time passcodes, under contracts that protect your data.
We do not sell personal data.
6. How long we keep it
We keep personal data only as long as needed for the purposes above. Records connected to regulated payment services are retained for the periods required by law, including anti-money laundering records, which Kenyan law requires us to keep for at least ten (10) years. Website log data is kept for shorter operational periods.
7. How we protect it
The Services run on protected cloud infrastructure with encryption in transit and at rest, multi-factor and passwordless authentication, least-privilege access controls and complete audit logs. Access to compliance data is restricted to authorised personnel.
8. Your rights
Under the Data Protection Act, 2019 you have the right to be informed about how your data is used; to access it; to correct or delete it; to object to or restrict certain processing; and to data portability where applicable. Some rights are limited where the law requires us to retain records. To exercise a right, contact our Data Protection Officer. You may also lodge a complaint with the Office of the Data Protection Commissioner.
9. Cookies
This website uses only the cookies necessary for it to function, and simple analytics to understand how the site is used. We will ask for your consent before setting any non-essential cookies.
10. Changes
We will post any changes on this page with a new version number and date, and will notify registered users of material changes.
11. Contact
Khala Technologies · Rotterdam Mall, Kerarapon, Nairobi · info@fskadvisory.com · +254 710 544 544.