Privacy Policy

1. Introduction

Llama Events ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our event platform service, website, and mobile application (collectively, the "Platform").

This Privacy Policy has been developed in accordance with the Data Protection Act of Kenya, 2019, and other applicable laws. Please read this Privacy Policy carefully. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Data Controller

Llama Events is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us at:

3. Information We Collect

3.1 Personal Data

We may collect the following categories of personal data:

• Identity Data: Full name, username, profile picture.
• Contact Data: Email address, phone number, physical address.
• Financial Data: Payment information, transaction history via certified payment partners.
• Technical Data: IP address, browser type, device information.
• Profile Data: Preferences, interests, event history.
• Usage Data: Information about how you use our Platform.

3.2 Special Categories of Personal Data

We do not collect any special categories of personal data (such as details about your race, ethnicity, religious beliefs, health data) unless:

• You have given us explicit consent;
• It is necessary for specific event requirements (e.g., dietary restrictions, accessibility needs);
• It is required by law.

4. How We Collect Your Data

We collect data through:

• Direct interactions: When you create an account, register for events, or contact us.
• Automated technologies: Cookies, server logs, and analytics.
• Third parties: Payment processors, social media platforms if you choose to connect them.

5. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide and maintain our Platform
• To process and manage event registrations and payments
• To communicate with you about events, updates, and services
• To personalize your experience and provide content recommendations
• To improve our Platform and develop new features
• To prevent fraud and enhance security
• To comply with legal obligations

6. Legal Basis for Processing

Under the Data Protection Act of Kenya, 2019, we process your personal data on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party.

7. Data Sharing and Disclosure

We may share your personal data with:

• Event Organizers: When you register for an event, your information is shared with the event organizer.
• Service Providers: Third-party vendors who perform services on our behalf (payment processing, hosting, analytics).
• Legal Authorities: When required by law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

8. International Transfers

We may transfer your personal data to countries outside Kenya. When we do, we ensure a similar degree of protection is afforded to your data by ensuring at least one of the following safeguards is implemented:

• Transferring to countries that have been deemed to provide an adequate level of protection.
• Using specific contracts approved by relevant data protection authorities.
• Obtaining your explicit consent for the transfer.

9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the risk of harm, and applicable statutory requirements.

11. Your Data Protection Rights

Under the Data Protection Act of Kenya, 2019, you have the following statutory rights:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct inaccurate or incomplete information.
• Right to Erasure: You can request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: You can request that we transfer your data to another organization or directly to you.
• Right to Object: You can object to our processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at privacy@llamaevents.co.ke.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Platform and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

13. Children's Privacy

Our Platform is not intended for children under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

15. Complaints

You have the right to make a complaint at any time to the Office of the Data Protection Commissioner (ODPC) in Kenya. We would, however, appreciate the chance to deal with your concerns before you approach the ODPC, so please contact us in the first instance.