Privacy Policy

Effective Date: 2/3/2025

Enea Foundation. (“Enea.biz,” “we,” “us,” or “our”) is committed to safeguarding your privacy and ensuring that your personal data is handled with the highest standards of transparency, integrity, and security. This Privacy Policy outlines the manner in which we collect, use, store, disclose, and protect your personal data when you access or use our digital job-matching platform (the “Platform”), which is accessible through our official website at https://enea.biz and our authorized mobile applications.

By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy as well as our Terms and Conditions. If you do not agree with any part of this Policy, you should refrain from accessing or using the Platform.

1. Scope

1.1. This Privacy Policy applies to all individuals and entities who access or use the services provided by Enea Foundation. (“Enea.biz ”, “we”, “our”, or “us”), including but not limited to:

• 1.1.1. Businesses or organizations that post jobs on the Enea.biz platform (“Businesses”);
• 1.1.2. Creative professionals who submit bids for, or perform, jobs posted on the platform (“Creative Workers”); and
• 1.1.3. All other individuals who access, browse, or otherwise interact with the Enea.biz platform or services, whether or not they create an account (“Users”).

2. Categories of Personal Data Collected

In the course of providing our services, Enea Foundation. may collect and process the following categories of personal data:

2.1. Identity and Contact Information

This includes data necessary to identify and communicate with you, such as:

• 2.1.1. Full name
• 2.1.2. Email address
• 2.1.3. Mobile phone number
• 2.1.4. Date of birth
• 2.1.5. National Identification Number or Passport Number (for identity verification purposes)

2.2. Professional and Profile Information

This information is collected to facilitate job matching and service delivery, including:

• 2.2.1. Business or company name and official registration details (applicable to Business users)
• 2.2.2. Skills, qualifications, employment history, and portfolio submissions (applicable to Creative Workers)
• 2.2.3. Job postings, project scopes, and bidding history

2.3. Financial and Transactional Data

This information is collected and processed through secure third-party service providers to support platform transactions, including:

• 2.3.1. Payment account details (processed via third-party payment gateways)
• 2.3.2. Escrow transactions and milestone-related financial data

2.4. Technical and Usage Data

This information is automatically collected data used to ensure platform functionality and improve user experience, such as:

• 2.4.1. Internet Protocol (IP) address
• 2.4.2. Device and browser information
• 2.4.3. Access logs, time stamps, and user interaction data

3. Purposes of Data Collection and Processing

We collect and process personal data for the following lawful and legitimate purposes:

• 3.1. Account Registration and Identity Verification: to confirm your identity, create, and manage your account on the Platform.
• 3.2. Service Enablement:to facilitate core platform functionalities, including job postings, bidding, messaging, contract formation, and project execution.
• 3.3. Payment Processing: to process and manage financial transactions, including escrow arrangements and milestone payments, through secure third-party payment processors.
• 3.4. Security and Fraud Prevention:to maintain the integrity and security of our Platform, detect and prevent fraud, abuse, or unauthorized access.
• 3.5. Legal and Regulatory Compliance:to fulfill our obligations under applicable laws, regulations, and legal processes.
• 3.6. Communication and Support:to provide important service-related notices, customer support, and—where legally permitted and consented to—promotional communications.

4. Legal Basis for Processing Personal Data

In accordance with the Data Protection Act, 2019, Enea Foundation. processes your personal data based on one or more of the following lawful grounds:

• 4.1. Consent: you have provided clear, informed, and affirmative consent for specific processing activities. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• 4.2. Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into such a contract, such as facilitating job postings, bidding, and payments.
• 4.3. Compliance with Legal Obligations: processing is required to comply with legal and regulatory duties, including tax reporting to the Kenya Revenue Authority (KRA), anti-money laundering requirements, and fraud prevention measures.
• 4.4. Legitimate Interests: Where processing is necessary to support our legitimate interests, or those of a third party, in enhancing platform performance, user experience, and maintaining a secure digital environment—provided such interests are not overridden by your fundamental rights and freedoms.

5. How We Share Your Data

We may disclose your personal data strictly in accordance with this Privacy Policy, and only when necessary, to the following parties:

• 5.1. Other Users of the Platform: Limited to information necessary to facilitate job postings, proposals, contracts, and collaboration.
• 5.2. Third-Party Service Providers: Including but not limited to payment processors, escrow agents, identity verification services (KYC), analytics tools, and hosting providers; solely for the purpose of delivering services on our behalf.
• 5.3. Government and Regulatory Authorities: Where disclosure is required by applicable law, regulation, legal process, or court order.
• 5.4. Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of our assets, your data may be transferred to the acquiring entity. You will be notified in advance where required by law.

NOTE: WE DO NOT SELL YOUR PERSONAL DATA TO THIRD PARTIES UNDER ANY CIRCUMSTANCES.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including to:

• 6.1. Provide and improve our services;
• 6.2. Comply with legal, regulatory, accounting, and tax obligations;
• 6.3. Resolve disputes and enforce our agreements.

Inactive accounts and related data may be anonymized or securely deleted after 2 years of inactivity, unless otherwise required by law.

7. Data Security

We employ industry-standard safeguards to protect your personal data, including:

• 7.1. Encryption: For data in transit and at rest;
• 7.2. Access Controls: To ensure that only authorized personnel may access sensitive information;
• 7.3. Security Monitoring: Including regular vulnerability scans and threat assessments. While we take all reasonable steps to secure your data, no system is entirely immune to security risks. In the event of a data breach, we will notify affected individuals without undue delay and in accordance with applicable Kenyan law.

8. Your Rights

Under the Kenya Data Protection Act, 2019, you have the following rights:

• 8.1. Right of Access: Request to view or obtain a copy of your personal data;
• 8.2. Right to Correction: Request corrections to inaccurate or incomplete data;
• 8.3. Right to Erasure: Request deletion of your personal data (subject to legal and contractual retention obligations);
• 8.4. Right to Object: Object to processing for direct marketing or profiling;
• 8.5. Right to Data Portability: Request the transfer of your personal data to another service provider in a structured, commonly used format.

To exercise these rights, please contact us at:

• info@enea.biz
• Hope Center, Lavington, Nairobi, Kenya

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• 9.1. Enhance your experience by remembering preferences;
• 9.2. Analyze usage patterns and improve Platform performance;
• 9.3. Enable secure login, authentication, and session management.

You can manage or disable cookies at any time via your browser settings. However, doing so may affect certain functionalities of the Platform.

10. Cross-Border Data Transfers

Where personal data is transferred outside Kenya (e.g., to cloud infrastructure providers or third-party analytics platforms), such transfers are carried out in compliance with the Data Protection Act, using one of the following safeguards:

• 10.1. Transfers to countries deemed to provide adequate levels of data protection; or
• 10.2. Standard contractual clauses or other binding legal mechanisms ensuring appropriate data protection commitments.

11. Children’s Privacy

Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that data from a child under 18 has been collected, we will promptly delete such data in accordance with applicable law.

12. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time. Any material changes will be communicated through the Platform and will become effective no sooner than 30 days after such notice.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact:

Enea Foundation

Hope Center, Lavington, Nairobi, Kenya

Email: info@enea.biz

Phone: +254 708 946 382

Website: enea.biz