1. Who we are
files.co.ke provides downloadable digital files for people in Kenya. We are the data controller for personal data collected through this site. Contact us at [email protected] for anything in this policy.
2. What we collect
We collect only what we need to run the service:
- Payment details you give at checkout: your M-Pesa phone number and, if you choose to give one, your email address.
- Order information: the files bought, amount, date, status and payment reference. We never see or store your M-Pesa PIN.
- Basic technical information: pages requested, device and browser type, IP address and error logs, kept in server logs for security and reliability.
- Messages you send us by email or WhatsApp.
3. How we use it
- To process your payment, unlock your download and give you support.
- To keep the site secure, detect fraud and abuse, and fix errors.
- To keep the records we must keep for accounting and legal reasons.
We do not sell your personal data and we do not use it for advertising profiles.
5. Cookies and local storage
The site stores a few things in your browser (local storage), on your device only: your cart, the list of files you have bought ("My Files") with their download links, and recently used preferences. These are needed for the cart and downloads to work. We do not use advertising cookies. Clearing your browser data removes them, and your cart and My Files list will then be empty on that device.
6. How long we keep it
Order and payment records (the orders log) are kept for as long as needed for accounting, tax, fraud-prevention and legal purposes. Server logs are kept for a short period for security. Other data is kept only as long as needed for the reason it was collected, then deleted or anonymised.
7. Your rights under the Data Protection Act, 2019
You may ask us to tell you what personal data we hold about you, to correct it, to delete it, to restrict or object to some uses, and to give it to you in a usable format. Where we rely on your consent you can withdraw it at any time. To make a request email [email protected] from the address or phone number you used; we may need to confirm it is you, and we will reply within the time the law sets. If you are unhappy with our response you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
8. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS). No online service is completely secure, so keep your phone and M-Pesa PIN private.
9. Children
The site is meant for teachers, parents, guardians and learners with a parent's or teacher's guidance. We do not knowingly collect personal data from children without appropriate consent.
10. Changes to this policy
We may update this policy. The date at the top shows when it last changed.
11. Data requests and contact
For data requests or privacy questions, email [email protected].