Esafe Alliance Privacy Policy

1. Overview

Esafe Alliance ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in compliance with applicable laws, including:

• General Data Protection Regulation (GDPR) (for EU users)
• Uganda Data Protection and Privacy Act, 2019
• Kenya Data Protection Act, 2019
• Saudi Arabia's Personal Data Protection Law (PDPL)
• Other regional data protection laws

This Privacy Policy explains how we collect, use, store, and protect your data when you use:

• Esafe App (recruitment & monitoring platform)
• Esafe Wallet (FinTech/e-wallet services)
• Esafe SaaS Solutions (CRM, automation, workforce management tools)

By using our services, you consent to this policy. If you disagree, please discontinue use.

2. Data We Collect

We collect the following Personal and Non-Personal Data:

A. Personal Identification & Recruitment Data

• Name, phone, email, address
• Passport, visa, work permit details
• Biometric data (fingerprints, facial recognition where applicable)
• Employment history, contracts, and salary information

B. Financial & Transaction Data (Esafe Wallet)

• Bank details, transaction history
• Cross-border payment records
• KYC/AML verification documents

C. Technical & Usage Data

• IP address, device type, browser
• Cookies, analytics (see Cookie Policy)
• Location data (for compliance & fraud prevention)

D. Sensitive Data (Collected Only with Explicit Consent)

• Medical records (for pre-deployment checks)
• Criminal background checks (if legally required)

3. How We Use Your Data

Purpose	Legal Basis
Provide recruitment & SaaS services	Contractual necessity
Process payments & e-wallet transactions	Legal obligation (AML/KYC)
Compliance with labor/financial laws	Legal requirement
Fraud prevention & security	Legitimate interest
Improve services & user experience	Consent (where applicable)

4. Data Sharing & Third Parties

We share data only when necessary with:

• ✅ Recruitment agencies & employers (for candidate placement)
• ✅ Banks/payment processors (for transactions)
• ✅ Government/immigration authorities (legal compliance)
• ✅ Cloud providers (AWS) & IT security vendors

We do NOT sell your data.

5. International Data Transfers

Data may be transferred outside Uganda/Kenya/EU, but we ensure safeguards such as:

• Standard Contractual Clauses (GDPR)
• Local data protection laws compliance

6. Data Retention

We retain data only as long as necessary:

• Recruitment data: Up to 5 years (for compliance)
• Financial records: 7+ years (tax/legal requirements)
• User accounts: Until deletion request

7. Your Rights

You have the right to:

• 🔹 Access, correct, or delete your data
• 🔹 Withdraw consent (where applicable)
• 🔹 Port data (request a copy in machine-readable format)
• 🔹 Lodge complaints with a data protection authority

To exercise rights, contact:

• 📧 Email: [email protected]
• 📍 Address: [Esafe Alliance HQ, Uganda]

8. Security Measures

We implement:

• Encryption (SSL/TLS)
• Access controls & audits
• Regular security testing

9. Updates to This Policy

We may update this policy periodically. Check the "Last Updated" date.