Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Jawali Solutions Ltd (“Jawali”, “we”, “us”) collects, uses, shares and protects personal information when you visit this website, contact us, or use our loyalty, gift card, payment and RewardX services. We are the data controller for the information described here.

1. Who we are

Jawali Solutions Ltd is a technology company registered in Kenya and Côte d’Ivoire, headquartered at Manga House, Upper Hill, Nairobi. For any privacy question, contact us at info@jawalisolution.com or +254 797 152 777.

2. Information we collect

• Information you give us — your name, business name, role, email, phone number, town or city, and the contents of any enquiry you submit through our forms.
• Merchant onboarding information — for RewardX merchants: business registration details, the business owner’s identification, and a business bank account for settlement, collected to run know-your-business (KYB) checks.
• Technical information — basic device, browser and usage data collected automatically to keep the site secure and working, including via essential cookies.

3. How we use your information

• To respond to enquiries, prepare quotes, and provide the services you request.
• To verify merchants, prevent fraud, and meet legal, regulatory and anti-money-laundering obligations.
• To operate, secure and improve our website and platform.
• To send service communications and, where you have agreed, relevant updates. You can opt out of marketing at any time.

4. Legal bases

We process personal data where it is necessary to perform a contract or take steps at your request, to comply with a legal obligation, for our legitimate business interests (balanced against your rights), or on the basis of your consent where required. We handle personal data in line with the Kenya Data Protection Act, 2019 and other applicable data-protection laws in the markets where we operate.

5. Sharing your information

We share personal information only as needed: with service providers who host, secure or support our systems under confidentiality obligations; with loyalty-programme issuers, merchants and financial institutions strictly to operate redemptions and settlement; and with authorities where the law requires it. We do not sell your personal data.

6. RewardX and points redemption

Where you take part in RewardX, we process the information needed to consolidate loyalty balances, authorise redemptions, settle merchants and maintain an audit trail. Balances are checked in real time and are not stored on merchant devices. Further detail is set out in the RewardX & Merchant Terms.

7. Data retention

We keep personal data only for as long as needed for the purposes above, including to meet legal, tax, accounting and anti-fraud requirements, after which it is deleted or anonymised.

8. Security

We use technical and organisational measures including encryption in transit, access controls, device binding for merchant apps, two-factor authentication on privileged accounts, and monitoring. A summary of our controls is available on request as part of due diligence.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent. To exercise a right, email info@jawalisolution.com. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or the relevant authority in your country.

10. International transfers

We operate across several African markets, so your information may be processed outside your country. Where it is, we take steps to ensure it remains protected to the standard described in this policy.

11. Changes

We may update this policy from time to time. The “last updated” date above shows when it last changed.

12. Contact

Jawali Solutions Ltd, Manga House, Upper Hill, Nairobi · info@jawalisolution.com · +254 797 152 777.