1. Purpose
This Deletion Policy explains how a customer, supplier, visitor, applicant or other data subject can request deletion or erasure of personal data held by Kenlife, and when Kenlife may lawfully retain some records instead of deleting them immediately.
2. What you may request
You may request deletion of personal data that Kenlife is no longer authorised or required to retain, including data that is no longer necessary for its original purpose, consent-based data where consent is withdrawn and no other lawful basis applies, unlawful or excessive data, or direct-marketing data where you object to that processing.
3. How to make a request
Use the account/privacy request feature where available or email info@kenlife.co.ke with the subject Personal Data Deletion Request. Provide enough information to identify your account or records without sending unnecessary sensitive information. Kenlife may verify identity and authority before deletion.
4. Response period
Kenlife aims to acknowledge and process valid erasure requests promptly. Where the Kenyan Data Protection (General) Regulations apply, Kenlife will respond to an erasure request within fourteen days, subject to lawful exceptions and any necessary identity verification. Complex identity, legal-hold or record-matching issues may require clarification before the request can be completed.
5. Information we may need to retain
Deletion is not absolute. Kenlife may retain or restrict processing of records where necessary for tax, accounting, statutory reporting, contractual evidence, payment reconciliation, fraud prevention, health/safety/security, employment law, legal claims, dispute resolution, regulatory obligations or protection of the rights of other people.
For example, deleting a customer-facing profile does not necessarily require destruction of a legally required invoice or audit trail. Where possible, the account can be deactivated and non-required personal fields erased or pseudonymised while the mandatory record remains protected.
6. Account deletion versus transaction deletion
Account deletion disables the login and removes or anonymises profile information that is no longer needed. Transaction deletion is assessed separately because orders, bookings, invoices, payments, refunds, event registrations or supplier transactions may need to remain as business or statutory evidence.
7. WhatsApp and external platforms
Deleting information from KeDOS does not automatically delete copies independently controlled by Meta/WhatsApp, Google, a bank, payment gateway, booking platform or another external controller. Where Kenlife has shared data with a processor and law requires notification of an erasure request, Kenlife will take reasonable steps to notify the relevant processor. You may also need to exercise rights directly with an independent platform.
8. Backups and logs
Deleted information can remain for a limited period in protected backups or security logs until the backup cycle expires. Such copies are not restored into active use except for disaster recovery, legal obligation or security purposes and will remain subject to access controls.
9. Re-registration
After account deletion, you may create a new account later unless access was restricted for lawful fraud, safety or security reasons. A new account may receive a new branch/customer identifier; legally retained historical records may still be linked where necessary and lawful.
10. Refusal or restriction
If Kenlife cannot erase all requested data, we will explain the reason to the extent permitted by law. Where data is required as evidence, Kenlife may restrict its processing rather than erase it.
11. Complaints
If you believe a deletion request has not been handled lawfully, contact Kenlife first at info@kenlife.co.ke. You may also use applicable complaint mechanisms before Kenya’s Office of the Data Protection Commissioner.