Privacy Policy

• Identity information: National ID number, passport number, birth certificate details, KRA PIN, and similar government-issued identifiers, only as required for the specific service you request.
• Contact information: Full name, phone number, email address, physical/postal address.
• Payment information: M-Pesa transaction details processed via PesaPal. We do not store your M-Pesa PIN or full card numbers — these are handled directly by our licensed payment processor.
• Documents you upload or bring in: scanned IDs, certificates, photos, and supporting documents needed to process your requested service.
• Usage data: pages visited, services browsed, device/browser type, and approximate location, collected automatically to improve our platform.

• Process the government or digital service you have requested (e.g., submitting an application on eCitizen, KRA iTax, NTSA, SHA, or other official portals on your behalf).
• Communicate with you about the status of your application.
• Process payments for government fees and our service fees.
• Improve our services, troubleshoot issues, and prevent fraud.
• Send you service updates, receipts, and (only with your consent) promotional messages, which you may opt out of at any time.

We share your information only with:

• The relevant government agency or portal (e.g., eCitizen, KRA, NTSA, SHA, DCI, Business Registration Service) strictly as necessary to complete your requested service.
• Our payment processor (PesaPal/M-Pesa) to process transactions.
• Law enforcement or regulators, only if legally required to do so.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

• Your documents and personal data are stored on secure servers with access restricted to authorized Castez Digital staff directly handling your application.
• We use encryption for data in transit (HTTPS) and apply reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse.
• Physical documents (if submitted in person) are stored securely and disposed of safely once no longer needed for the service or legal record-keeping requirements.

We retain your personal information only for as long as necessary to complete your service, comply with legal/tax record-keeping obligations, and resolve any disputes. You may request deletion of your data at any time, subject to any legal retention requirements (e.g., financial transaction records).

Under the Kenya Data Protection Act (2019), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention limits).
• Object to certain processing of your data.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

To exercise any of these rights, contact us at info@castezdigital.co.ke.

Our website uses cookies to keep you logged in, remember your preferences, and understand how our site is used. You can disable cookies in your browser settings, though some features may not work correctly without them.

Our service pages link to official government portals (eCitizen, KRA, NTSA, SHA, etc.). We are not responsible for the privacy practices of these third-party government websites — please review their own privacy policies when using them directly.

Some services (e.g., birth certificates, minors' passports) involve processing a child's data on behalf of a parent/guardian. We only process such data with the parent/guardian's consent and involvement, and never allow minors to independently create accounts or make payments.

We may update this Privacy Policy from time to time. Material changes will be communicated via our website or by email/SMS where appropriate.

• Email: info@castezdigital.co.ke
• Phone/WhatsApp: +254 792 211 124
• Address: Fully Online Cyber, Eastern Bypass, Embakasi, Nairobi