Privacy Policy

Last updated: November 25, 2025

Our Service Region

This website and service are designed exclusively for users located in East African countries, including Kenya, Uganda, Tanzania, Rwanda, Burundi, South Sudan, Ethiopia, Somalia, Djibouti, and Eritrea. If you are not located in one of these countries, please do not use our service.

1. Introduction

Welcome to Enunua ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our East African business directory service. Our service is available only to users in East African countries. Please read this policy carefully. If you do not agree with its terms or are not located in an East African country, please do not access our site.

We strive to make this policy accessible. If you need it in an alternative format (e.g., large print, audio) or another language (e.g., Swahili), please contact us at privacy@enunua.com.

2. Eligibility and Geographic Scope

Our service is exclusively for individuals and businesses physically located in East African countries (Kenya, Uganda, Tanzania, Rwanda, Burundi, South Sudan, Ethiopia, Somalia, Djibouti, and Eritrea). We comply with local data protection laws, including:

  • Kenya’s Data Protection Act 2019
  • Uganda’s Data Protection and Privacy Act 2019
  • Tanzania’s Personal Data Protection Act 2022
  • Rwanda’s Law on Protection of Personal Data 2021
  • Ethiopia’s Personal Data Protection Proclamation 2022
  • Other applicable regulations in Burundi, South Sudan, Somalia, Djibouti, and Eritrea
Important: Geographic Scope
  • Permitted Users: Only users in the specified East African countries may access our service.
  • Prohibited Users: Our service is not available to users outside East Africa, including those in the European Union or North America.
  • Verification: We use IP address tracking and other methods to verify your location.
  • Access Restrictions: If you are detected accessing the service from a prohibited region, access may be restricted, and any inadvertently collected data will be deleted promptly.

3. Information We Collect

We collect information about you in the following ways:

3.1 Personal Data

  • Registration Information: Email address, country of residence
  • Business Profile Information: Business name, category, description, location, contact details, social media links
  • Photos: Business-related images you upload to your profile
  • Communication Data: Information you provide when contacting us

3.2 Usage Data

  • IP address and browser information
  • Pages visited and time spent on our site
  • Search queries and interactions with business profiles
  • Device information and operating system

3.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Essential cookies are necessary for the site to function and are set automatically. Non-essential cookies (e.g., for analytics or personalization) are only set with your consent via our cookie banner. You can manage preferences through the banner or your browser settings.

The table below details the cookies we use:

Cookie Name Purpose Type Retention Period
session_id Maintains user session for site functionality Essential Session (expires when browser is closed)
_ga Google Analytics: Tracks user interactions for site improvement Analytics (Non-essential) 2 years
user_prefs Stores user preferences (e.g., language or theme) Personalization (Non-essential) 1 year
geo_check Verifies user location for geographic restrictions Essential 1 day

To opt out of non-essential cookies, adjust your settings in our cookie banner or your browser. Disabling cookies may affect site functionality.

4. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain our business directory service
  • Verify user eligibility and geographic location
  • Create and manage your user account and business profiles
  • Facilitate connections between businesses and customers
  • Improve our website and services
  • Communicate with you about your account and services
  • Respond to inquiries and provide customer support
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

5. Information Sharing and Disclosure

We may share your information in these situations:

5.1 Public Business Profiles

Information in published business profiles (business name, description, location, contact details, photos) is publicly visible to all website visitors, as this is the core functionality of our directory service.

5.2 Service Providers

We share data with trusted third-party providers who assist us, such as cloud hosting providers (e.g., AWS), analytics services (e.g., Google Analytics), and customer support platforms. These providers are contractually obligated to protect your data.

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., Kenya’s Office of the Data Protection Commissioner).

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption and access controls. However, no method of transmission or storage is 100% secure.

6.1 Data Breach Notification

If we experience a data breach that may affect your personal information, we will notify you and relevant authorities (e.g., Kenya’s Office of the Data Protection Commissioner) within 72 hours, as required by applicable laws, and take steps to mitigate harm.

7. Data Retention

We retain your information only as long as necessary to provide our services and fulfill the purposes outlined in this policy. For example:

  • User account and business profile data are retained while your account is active and for up to 12 months after account deletion to comply with legal or audit requirements.
  • Usage data (e.g., IP addresses, browsing activity) is retained for up to 6 months for analytics and security purposes.
  • We may retain data longer if required by applicable East African laws.

8. Your Rights and Choices

Under East African data protection laws, you may have the following rights:

  • Access: Request a copy of your personal information.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your data, subject to legal retention requirements.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to certain uses of your data, such as marketing.
  • Withdrawal of Consent: Withdraw consent for data processing where applicable.

To exercise these rights, email privacy@enunua.com or use the contact form at www.enunua.com/contact, providing your name, contact details, and the specific request. We will verify your identity and respond within 30 days, as required by laws such as Kenya’s Data Protection Act 2019.

9. International Data Transfers

Your information may be processed outside your country of residence (e.g., for hosting or analytics). We ensure safeguards, such as standard contractual clauses, data processing agreements, or encryption, to protect your data in compliance with East African data protection laws.

10. Minors’ Privacy

Our service is not intended for minors under 18 years of age, as defined by applicable East African laws. We do not knowingly collect personal information from minors without verifiable parental consent. If we learn that a minor’s data has been collected, we will delete it promptly. Contact us at privacy@enunua.com if you have concerns.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

12. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions about this Privacy Policy, please contact us at:

  • Email: privacy@enunua.com
  • Website: www.enunua.com/contact
  • Address: Enunua, 123 Business Avenue, Nairobi, Kenya

14. Regional Specific Information

14.1 East African Countries

Our service is designed for users in East African countries. We comply with applicable data protection laws, including Kenya’s Data Protection Act 2019, Uganda’s Data Protection and Privacy Act 2019, Tanzania’s Personal Data Protection Act 2022, Rwanda’s Law on Protection of Personal Data 2021, Ethiopia’s Personal Data Protection Proclamation 2022, and other relevant regulations.

14.2 Non-East African Users

Our service is not available to users outside East Africa, including EU citizens or residents. We use technical measures, such as IP-based geoblocking, to restrict access from prohibited regions. If we inadvertently collect data from users outside East Africa, we will delete it promptly and restrict further access.

Your Consent and Location Confirmation

By using our website and services, you consent to the collection and use of your information as described in this Privacy Policy and confirm that you are physically located in one of the specified East African countries.