1. Data Controller
Yoike Solutions Ltdy.
KRA PIN: [KRA-PIN]
Email: support@prontoparrot.com
2. Data We Collect
- Email address
- Full name (from ID verification and M-Pesa)
- National ID or passport details
- Phone number (M-Pesa registered)
- M-Pesa verification details
- Transaction history and conversion records
- Wallet addresses (Base network)
- Device and browser information
- IP addresses
3. Purpose of Processing
- KYC verification (identity confirmation)
- Digital asset conversion processing
- Tax compliance and reporting (KRA)
- AML/CFT monitoring and compliance
- Customer support and communication
- Service improvement and analytics
4. Legal Basis
- Consent: You consent to data processing during registration
- Contractual necessity: Processing required to provide the conversion service
- Legal obligation: Tax reporting (KRA), AML/CFT compliance, Virtual Asset Service Providers Act, 2025
5. Data Sharing
We share data with the following third parties only as necessary:
- Smile ID: For identity verification (KYC)
- Safaricom (Daraja): For M-Pesa name verification and disbursements
- Coinbase: For payment processing
- Kenya Revenue Authority (KRA): Tax compliance and reporting
- Financial Reporting Centre (FRC): Suspicious transaction reports as required by law
6. Data Retention
- Active account data: Retained during account lifetime
- Financial records: 7 years (as required by KRA)
- Personal data: Deleted within 30 days of account closure (except financial records)
- Audit logs: 7 years for compliance
7. Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Portability: Request your data in a machine-readable format
To exercise these rights, contact us at support@prontoparrot.com
8. ODPC Registration
Yoike Solutions Ltdy. is registered with the Office of the Data Protection Commissioner (ODPC) in accordance with the Kenya Data Protection Act, 2019.