Privacy Policy

1. Who We Are

Mekh is a marketplace connecting car owners with automotive technicians in Kenya. We provide a platform where clients can find and book services from verified technicians including tinting, wrapping, PPF coating, ceramic coating, detailing, and tuning services.

For privacy concerns, contact us at: [email protected]

2. What Data We Collect

From Technicians:

• Full name
• Business name
• Phone number
• WhatsApp number
• Email address
• Location (county and area)
• Profile photo
• Portfolio photos
• Years of experience
• Services offered and pricing

From Clients:

• Name
• Phone number
• WhatsApp number
• Email address
• General location (when using location detect feature)

Automatically Collected:

• Device type
• Browser information
• Pages visited
• Time spent on site

From Bookings:

• Name
• Phone number
• Service requested
• Location submitted in booking form

3. Why We Collect It

• Contact details: To connect clients with technicians via WhatsApp for booking inquiries.
• Location: To show nearby technicians based on the client's area.
• Profile photos and portfolio: To display on the technician's public profile for clients to view.
• Email: To send account notifications, booking confirmations, and platform updates.
• Booking details: To log the lead and notify the relevant technician of the service request.

4. Who We Share It With

• •Technician profiles: All technician profile information is publicly visible to anyone visiting the platform.
• •Client bookings: When a client books a service, their booking details (name, phone, service requested, location) are shared with the specific technician they booked.
• •Analytics: Basic usage analytics are shared with Cloudflare and other analytics providers to help us understand platform usage.
• •Third party sales: We do NOT sell user data to any third parties.

5. Third Party Services We Use

We use the following services that access user data:

• Supabase — Stores all user accounts, technician profiles, and booking data.
• Cloudinary — Stores all uploaded photos including profile photos and portfolios.
• Cloudflare — Hosts the website and handles DNS. Provides security and analytics.
• WhatsApp — Used for all client-technician communication via click-to-chat.
• Google — OAuth sign-in provider (if users choose to sign in with Google).
• OpenStreetMap / Nominatim — Used for location detection to find nearby technicians. No GPS data is stored.

6. Location Data

• •Location is only requested when the user explicitly taps "Use my location" button.
• •It is used solely to find and display nearby technicians in the user's area.
• •Only the general area name is stored (e.g., "Westlands", "Kilimani"), not precise GPS coordinates.
• •Users can manually enter their location instead of using GPS detection.

7. Photos and Portfolio Content

• •Photos uploaded by technicians are stored on Cloudinary and displayed publicly on their profile page.
• •Technicians can request removal of their photos by contacting [email protected]
• •Mekh does not claim ownership of photos uploaded by technicians. They remain the property of the uploader.

8. Data Retention

• •Active accounts: Data is kept as long as the account remains active.
• •Suspended or deleted accounts: Data is removed within 30 days of account deletion request.
• •Booking/lead records: Kept for 12 months then automatically deleted.
• •Users can request full data deletion at any time by emailing [email protected]

9. Your Rights (Kenyan Data Protection Act 2019)

Under Kenya's Data Protection Act 2019, you have the following rights:

• Right to be informed: Know what data we hold about you.
• Right to correction: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data (also known as "right to be forgotten").
• Right to withdraw consent: Withdraw consent for data processing at any time.

To exercise any of these rights, contact us at [email protected]

10. Cookies

We use minimal cookies on our platform:

• Authentication session cookies (to keep you logged in)
• Basic analytics cookies (to understand how users navigate the site)

You can disable cookies in your browser settings at any time. Disabling cookies may affect some functionality of the platform.

11. Children

Mekh is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately at [email protected] and we will delete such data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify users via the platform. Continued use of Mekh after any changes to this policy constitutes acceptance of the updated terms.

13. Contact Us