Privacy Policy (KDPA 2019)

1. Data Controller Information

NightNurse operates as a registered data controller under the Office of the Data Protection Commissioner (ODPC) Kenya. We collect and process personal data in strict accordance with the provisions of the Kenya Data Protection Act, 2019 (KDPA).

2. Information We Collect

• Companion Registration Data: Mobile phone numbers for M-Pesa billing, email addresses, display photos, and optional service region tags.
• Verification Data: Government ID copies and real-time selfies uploaded for identity validation. (Purged within 24 hours of approval).
• Technical Data: Anonymized IP logs and device agent strings collected strictly for threat detection and DDoS mitigation.

3. Data Subject Rights (KDPA Principles)

Under the Kenya Data Protection Act 2019, you retain the following statutory rights:

• Right to Access: Request a copy of all personal records associated with your account.
• Right to Rectification: Request correction of inaccurate or outdated profile details.
• Right to Erasure (Right to be Forgotten): Delete your account and request complete purge of listing history.

4. Data Inquiries & DPO Contact

For data access or erasure requests, contact our designated Data Protection Officer at dpo@nightnurse.co.ke.