Privacy Policy

1. Who we are and our role

Verifisha is a registered data controller and data processor. We are a controller for data we collect to run our own business (for example your account), and a processor when we run checks on your behalf, where you are the controller and remain responsible for a lawful basis and consent.

2. Data we collect

Depending on how you use the Service, we may collect:

• Account data — name, email, phone, organisation and login details.
• Verification data — information you or a subject provide, and results returned from checks (identity, business, financial, risk and reference data).
• Usage and device data — pages viewed, actions taken, IP address, browser and device information.
• Waitlist and enquiry data — contact details you submit through our forms.

3. How we use data and our lawful basis

We use personal data to provide and secure the Service, run requested checks, take payment, support you, comply with legal obligations, and improve the product. Our lawful bases include performance of a contract, consent, legitimate interests and compliance with law.

4. Consent and people who are checked

Sensitive checks are consent-led: the subject is asked to approve before checks run, and that consent is stored as evidence. If you run checks through Verifisha, you are responsible for having a lawful basis and, where required, the subject’s consent.

5. Cookies and analytics

We use essential cookies to run the site, and analytics to understand and improve how it is used. We use Google Analytics 4 and Microsoft Clarity, which set cookies and collect usage and device data. We do not send your name, email, phone or ID numbers to these tools, and we mask sensitive form fields from session recording.

6. Third-party sources and processors

To deliver checks we work with third-party data sources (such as IPRS, the Business Registration Service, credit reference bureaus and watchlists) and service providers (such as hosting, payments and analytics). They may process personal data on our behalf under appropriate terms.

7. Sharing and disclosure

We do not sell personal data. We share it only as needed to provide the Service, with your instruction or consent, to comply with the law or a lawful request, or to protect our rights and the safety of others.

8. Data retention

We keep personal data only as long as needed for the purposes above, to meet legal and audit obligations, and to resolve disputes. Verification evidence may be retained to preserve an auditable record, subject to applicable law.

9. Security

We protect personal data with encryption in transit and at rest, scoped and access-logged sharing, and least-privilege access. No system is perfectly secure, but we work continuously to keep your data safe.

10. Data residency and transfers

Verifisha is Kenya-first and aligns data handling to local regulation. Where data is processed outside Kenya by a provider, we take steps to ensure an appropriate level of protection.

11. Your rights

Subject to law, you may:

• Access the personal data we hold about you.
• Ask us to correct or delete your personal data.
• Object to or restrict certain processing, and withdraw consent.
• Lodge a complaint with the Office of the Data Protection Commissioner.

12. Marketing and the app waitlist

If you join our waitlist or ask to be contacted, we use your details to send you the updates you asked for (such as early access and launch news). You can opt out at any time.

13. Children

The Service is not intended for children under 18. We do not knowingly collect their personal data, except where a check is lawfully requested by a parent, guardian or authorised party.

14. Changes and contact

We may update this Policy from time to time and will post the new version here with a revised date. To exercise your rights or ask a question, contact us using the details on our contact page.