Privacy Notice

Effective date: 23 September 2026

1. Scope and controller

This notice explains how Tripcum processes personal data when you browse the directory, create an advertiser account, publish a profile, buy advertising, contact support, or make a report. Tripcum is responsible for the processing described here. Privacy enquiries and rights requests can be sent through the email or support channels shown in the Site footer.

2. Data we process

Depending on how you use Tripcum, we process account and contact details; authentication and security records; profile text, media, location selections, service selections, prices, and contact channels you choose to publish; advertising orders, wallet entries, coupons, and payment status returned by the payment provider; moderation decisions; support messages; reports and appeals; and technical records needed to secure and operate the service.

Do not send clinical records or unnecessary identity documents through Tripcum. If age or identity evidence becomes required, Tripcum will first publish a separate notice describing the exact evidence, purpose, access, safeguards, and retention period.

3. Why we process data

We use data to provide and secure accounts; publish and moderate advertisements at the advertiser's request; deliver and account for paid advertising; prevent fraud, abuse, exploitation, and access by minors; respond to support, legal requests, reports, and appeals; keep evidence of legal acceptance and transactions; comply with law; and improve service reliability.

Where Kenyan data-protection law requires a lawful basis, processing is based as applicable on performance of a contract, compliance with a legal obligation, protection of legitimate interests that do not override your rights, protection of vital interests, or consent. Consent may be withdrawn where it is the basis, without affecting earlier lawful processing.

4. Publication and sharing

Profile information deliberately marked for publication is visible to directory visitors. Choose carefully: public information can be copied by others. We share other data only with staff and processors who need it to operate the service, including hosting, storage, communications, security, and payment providers; with professional advisers; with authorities when legally required; and with a successor in a lawful business transfer.

We do not sell personal data. A payment provider receives the data needed to process a payment under its own terms. Tripcum receives payment status and references, not full payment-card credentials.

Before any personal data is transferred outside Kenya, Tripcum will identify the destination, recipient safeguards, and applicable transfer basis in this notice or a collection-specific notice.

5. Retention and security

Tripcum keeps personal data only for as long as needed for the purposes above and applicable legal, accounting, safety, dispute, and enforcement requirements. Published content is removed from public view when it is deleted or unpublished, subject to backup expiry and records that must be retained. Legal acceptance records and transaction evidence are retained for the applicable limitation and record-keeping periods. Final retention periods must be approved before production launch.

We use access controls, encryption in transit, restricted administrative access, logging, backups, and other proportionate safeguards. No internet service can promise absolute security.

6. Your rights

Subject to applicable law, you may ask to be informed about processing; access personal data; correct false or misleading data; object to processing; restrict or stop processing; request deletion of data that is no longer lawfully required; receive portable data where applicable; and withdraw consent. You may also complain to Kenya's Office of the Data Protection Commissioner.

Requests can be made through the privacy contact in the Site footer. We may need to verify that the request concerns your data. We will explain any lawful reason we cannot fully comply.

7. Changes and contact

We will publish a new version when this notice changes materially and require registered advertisers to acknowledge the current version where appropriate. Questions and requests can be sent through the privacy or support channel shown in the Site footer.