Privacy Policy

Last updated: 20 February 2026

1. Introduction

This Privacy Policy explains how Qazana Systems LTD ("Qazana", "we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you use our website at pesana.net and our product Pesana (the "Services").

This policy follows the Kenya Data Protection Act, 2019 and regulations from the Office of the Data Protection Commissioner.

2. Data Controller

Qazana Systems LTD is the data controller responsible for your personal data. For questions about this policy, contact us at legal@qazana.net.

3. Personal Data We Collect

We collect information through:

• Account registration: name, email address, password
• Contact forms: name, email, topic, message
• Email signups for product updates
• Payment details processed through Paystack Payments Kenya Limited (we do not store full card information)

We also automatically collect usage patterns, device specifications, browser information, IP addresses, and access logs.

We use essential cookies to keep the Services functional and may use analytics cookies to understand how the Services are used.

4. How We Use Your Data

We process your data to provide services, process payments, respond to inquiries, send communications, analyse usage, and meet legal requirements.

5. Legal Basis for Processing

We process data based on: consent for specific purposes, contractual necessity, legitimate business interests, and legal compliance obligations.

6. Payment Processing

Payments for the Services are processed by Paystack Payments Kenya Limited in accordance with their merchant privacy policy and PCI DSS standards. We receive only transaction references, payment status, and the final four digits of your card.

7. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with payment processors, service providers under data processing agreements, and legal authorities when required by law.

8. Cross-Border Data Transfers

Any transfers of data outside Kenya require equivalent protection standards or appropriate contractual safeguards.

9. Data Retention

Transactional records are retained for seven (7) years in accordance with applicable tax obligations. Other data is deleted or anonymised when no longer necessary for the purpose it was collected.

10. Your Rights

Under the Kenya Data Protection Act, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to processing
• Port your data to another service

You may also file a complaint with the Office of the Data Protection Commissioner.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, including encryption and access controls.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the date at the top of this page and notifying you via the website or email.

14. Contact

Qazana Systems LTD
Email: legal@qazana.net