Privacy Policy

Daily Drive Sourcing is an online marketplace for auto parts, operated in Nairobi, Kenya. We are the data controller for personal data collected through this Platform. Contact: privacy@dailydrivesourcing.com

We collect the following categories of personal data:

Account data:

• Full name
• Email address
• Phone number (M-Pesa registered)
• Password (hashed, never stored in plain text)

Seller data (in addition to above):

• National ID or Passport (uploaded for KYC verification)
• Business registration documents (optional, for Silver/Gold tiers)
• Physical address or trading location
• M-Pesa number for payouts

Transaction data:

• Listing views, purchases, and order history
• Payment confirmation references from M-Pesa

Usage data:

• Pages visited, search queries, device type and browser
• IP address and approximate location

We use your data to:

• Create and manage your account
• Verify seller identity through our KYC process
• Process transactions and manage escrow
• Send order notifications and payment confirmations
• Handle disputes between buyers and sellers
• Improve Platform features and fix issues
• Prevent fraud and abuse
• Comply with Kenyan legal requirements

We do not use your data for advertising to third parties. We do not sell your personal data.

We process your data on the following legal bases:

• Contract performance: processing is necessary to provide the Platform services
• Legitimate interests: fraud prevention, security, product improvement
• Legal obligation: KYC requirements and financial record-keeping
• Consent: marketing communications (you can opt out at any time)

We share limited data with:

• Sellers: your name and phone number when you complete a purchase (for delivery coordination)
• Buyers: seller trading name, location, and verification tier (visible on listings)
• Safaricom/M-Pesa: phone number and transaction references for payment processing
• Cloudinary: images you upload are stored on Cloudinary servers
• OpenRouter AI: listing text and chat messages are processed to generate AI responses (no personal identifiers are sent)

We do not share data with advertisers, data brokers, or any other third parties.

We retain your data for as long as your account is active. If you close your account:

• Account data is deleted within 30 days
• Transaction records are retained for 7 years as required by Kenyan financial regulations
• KYC documents are deleted within 90 days of account closure

Under applicable Kenyan data protection law, you have the right to:

• Access a copy of your personal data
• Correct inaccurate personal data
• Delete your account and personal data (subject to legal retention requirements)
• Object to processing for direct marketing
• Withdraw consent where processing is based on consent

To exercise any of these rights, email: privacy@dailydrivesourcing.com

We protect your data using:

• HTTPS encryption on all pages
• Hashed password storage (bcrypt)
• Restricted admin access with role-based permissions
• Cloudinary secure storage for uploaded documents

No system is 100% secure. If you suspect a breach, contact us immediately.

We use essential session cookies to keep you logged in. We do not use advertising cookies or third-party tracking pixels. You may disable cookies in your browser, but the Platform will not function correctly without session cookies.

This Platform is not intended for users under 18. We do not knowingly collect data from children. If we discover we have collected data from a minor, we will delete it promptly.

We may update this Privacy Policy. Material changes will be communicated by email to registered users. Continued use after 14 days constitutes acceptance.

Data controller: Daily Drive Sourcing, Nairobi, Kenya. Email: privacy@dailydrivesourcing.com