Privacy Policy
Last updated: 15 August 2026
Earlybird Capital Markets Ltd (“Earlybird”) processes personal data in line with the Kenya Data Protection Act, 2019 (KDPA). This notice explains what we collect, why, and your choices.
1. Data we collect
Account details (name, email, phone), verification documents and KYC/KYB information, investment and payment records, device/session data needed for security, and messages you send to support. If you enable SMS or email OTPs, we process those channels to deliver codes.
2. Why we use it
To create and secure accounts, verify identity, operate invest and raise flows, meet AML/KYC and regulatory obligations, prevent fraud, send service messages (including OTPs and transaction notices), and improve reliability of the Platform.
3. Sharing
We share data with processors who help us run the service (hosting, email/SMS, payments) under appropriate contracts, and with regulators or law enforcement when legally required. We do not sell your personal data.
4. Retention & security
We keep data only as long as needed for the purposes above and applicable retention rules. We use access controls, encryption in transit where supported, and operational safeguards. No method of transmission is perfectly secure.
5. Your rights
Subject to KDPA, you may request access, correction, deletion, or restriction of your personal data, and lodge a complaint with the Office of the Data Protection Commissioner. Contact support@earlybird.africa to exercise these rights.
6. Updates
We may update this notice as our practices change. The “Last updated” date at the top will change when we do.