Compliance

What we do in practice under each of them.

1. GDPR principles

The data protection principles of the EU General Data Protection Regulation, which we apply to the personal data we handle.

• Transparent: our Privacy Policy says what we collect, why and who we share it with.
• Used for a stated purpose: no advertising, no marketing profiles, no sale of data.
• Only what's needed: the Service sets a single sign-in cookie and no tracking cookies.
• Accurate and correctable: records can be corrected in the app, and anyone can ask us to correct their data.
• Secure: each business sees only its own records, passwords are stored as one-way hashes, and two-factor sign-in is available.
• Accountable: significant actions are recorded in an audit log with the user and time.

2. Consumer Protection Act, 2012

Kenya's law on fair dealing, clear information and honest marketing.

• Clear prices: each plan's price and staff limit are shown on our home page, and the trial and payment options are shown during sign-up, before you pay.
• Honest descriptions: we describe only features the product has, and say which ones need a paid plan.
• Your statutory rights stay: our Terms of Use don't limit any right you have under this Act.

3. Computer Misuse and Cybercrimes Act, 2018

Kenya's law against unauthorised access to computer systems and data, and other cybercrime.

• Access control: repeated failed sign-ins are throttled and locked out, two-factor sign-in is available, staff see only what their role permits, and every data change is protected against cross-site request forgery.
• Clear rules: our Terms of Use forbid unauthorised access, probing for weaknesses and disrupting the Service.
• Lawful requests: we disclose data to authorities only where the law or a valid legal process requires it.
• Report a problem: if you find a security weakness, please tell us at support@limapos.africa instead of testing it further.

4. Questions and complaints

If you have a question about this statement, or think we've fallen short of it, email support@limapos.africa. This statement describes how we work; it is not a third-party certification.