Data protection

WemaHub Limited is a data controller for account and billing information, and a data processor for the member records your group's officials enter — your group decides what is collected and why; we process it on your group's instructions.

We are registered with Kenya's Office of the Data Protection Commissioner (ODPC) as a data controller and processor, in line with the Data Protection Act, 2019.

We process personal data on one of these bases, depending on the situation:

Your group's records are stored with infrastructure providers that maintain data centres meeting internationally recognised security standards. Where any processing happens outside Kenya, we rely on contractual safeguards consistent with the Data Protection Act's cross-border transfer requirements.

To access, correct, delete or export personal data we hold, ask your group's official first — most requests are handled immediately from inside the app. For anything they can't resolve, or if you are contacting us directly as a data subject, email hi@wemahub.com and we will respond within the timeframes set by the Act.

If a breach occurs that is likely to result in a risk to your rights, we notify the ODPC and affected groups without undue delay, and in any case within the period required by law, describing what happened, what data was involved and what we are doing about it.

If you are not satisfied with how we have handled your personal data, you may lodge a complaint with the Office of the Data Protection Commissioner, Kenya, in addition to contacting us directly.