Privacy Policy

1. Who we are

LumiQ Pay is operated by MaveriQ Technologies. This policy explains how we handle personal data when you use our Services, in line with the Kenya Data Protection Act, 2019 and other applicable laws.

2. Data we collect

• Account & KYC data: business details, identification documents, contact information.
• Transaction data: amounts, references, payer phone numbers, and payment metadata needed to process and reconcile payments.
• Technical data: API logs, device and usage information for security and reliability.

We are designed so that full card details are handled within PCI-DSS-aligned systems and tokenized — they are not stored on merchant servers.

3. How we use data

We use data to provide and secure the Services, process payments and payouts, prevent fraud, meet legal and regulatory obligations, and improve our products.

4. Sharing

We share data only as needed with financial partners, payment networks, and service providers to deliver the Services, with regulators where required by law, and within the MaveriQ group under appropriate safeguards. We do not sell personal data.

5. Retention & security

We retain data as long as needed for the Services and to meet legal and financial record-keeping obligations. Data is encrypted in transit and at rest, with access controls and monitoring.

6. Your rights

• Access, correct, or request deletion of your personal data, subject to legal limits.
• Object to or restrict certain processing.
• Lodge a complaint with the Office of the Data Protection Commissioner.

7. Contact

To exercise your rights or ask about this policy, email privacy@lumiqpay.com.