Privacy Policy

How we collect, use, and protect your personal information

Last updated: October 27, 2025

Introduction

At Blocks Ltd. ("we," "our," or "us"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our property investment platform.

By using our Platform, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

We collect the following personal information:

  • Identity Data: Full name, date of birth, nationality, government-issued ID
  • Contact Data: Email address, phone number, postal address
  • Financial Data: Bank account details, investment history, income information
  • Technical Data: IP address, browser type, device information, usage data
  • Profile Data: Investment preferences, risk tolerance, communication preferences

1.2 Automatically Collected Information

  • Log files and usage patterns
  • Cookies and tracking technologies
  • Device and browser information
  • Location data (with your consent)
  • Analytics and performance data

2. How We Use Your Information

We use your information for the following purposes:

2.1 Platform Services

  • Creating and managing your account
  • Processing investment transactions
  • Providing investment recommendations
  • Conducting identity verification and KYC procedures
  • Communicating about your investments and account

2.2 Legal and Compliance

  • Complying with legal and regulatory requirements
  • Preventing fraud and financial crimes
  • Conducting risk assessments
  • Maintaining records for audit purposes

2.3 Platform Improvement

  • Analyzing usage patterns and preferences
  • Improving our services and user experience
  • Developing new features and products
  • Providing customer support

3. Information Sharing and Disclosure

Privacy Commitment: We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information in the following circumstances:

  • Service Providers: Trusted third parties who assist in platform operations
  • Legal Requirements: When required by law, regulation, or court order
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • Consent: When you have given explicit consent
  • Protection: To protect our rights, property, or safety, or that of others

4. Data Security

We implement robust security measures to protect your personal information:

  • Encryption: All data is encrypted in transit and at rest
  • Access Controls: Strict access controls and authentication measures
  • Regular Audits: Security assessments and penetration testing
  • Staff Training: Regular security training for all employees
  • Incident Response: Comprehensive breach response procedures

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal and regulatory requirements
  • Resolve disputes and enforce agreements
  • Maintain business records for legitimate purposes

Generally, we retain account information for 7 years after account closure, as required by financial regulations.

6. Your Privacy Rights

You have the following rights regarding your personal data:

Access

Request copies of your personal data

Rectification

Request correction of inaccurate data

Erasure

Request deletion of your data

Portability

Request transfer of your data

To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for platform functionality
  • Performance Cookies: Help us analyze platform usage
  • Functional Cookies: Remember your preferences
  • Marketing Cookies: Deliver relevant content (with consent)

You can control cookies through your browser settings, though some features may not work properly without them.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Kenya. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Adequacy decisions from relevant authorities
  • Standard contractual clauses
  • Binding corporate rules
  • Certification schemes

9. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Sending you an email notification
  • Displaying a prominent notice on our Platform

Your continued use of our Platform after changes constitutes acceptance of the new Privacy Policy.

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy Officer: [email protected]

General Inquiries: [email protected]

Address: 123 Investment Street, Nairobi, Kenya 00100

Phone: +254 700 123 456

12. Data Protection Authority

You have the right to lodge a complaint with the relevant data protection authority if you believe we have not handled your personal data appropriately.

Kenya: Office of the Data Protection Commissioner

Website: www.odpc.go.ke

Email: [email protected]