Privacy Policy

Effective date: 22 July 2026

Autolist Kenya ("Autolist", "we", "us", or "our") respects your privacy. This policy explains how we handle personal data when you use our vehicle marketplace, website, account tools, and related services (the "Platform"). We process personal data in accordance with the Kenya Data Protection Act, 2019 and applicable regulations.

1. Who controls your data

Autolist Kenya is the data controller for personal data processed through the Platform. Questions and data-rights requests can be sent to support@autolist.co.ke.

2. Personal data we collect

• Identity and contact data: your name, email address, phone number, account role, and profile details.
• Verification data: business registration, KRA, dealer, ownership, identity, or related documents when verification is required. Do not send sensitive documents through ordinary listing enquiries.
• Account and security data: authentication records, account preferences, access logs, fraud signals, and support history.
• Vehicle and listing data: vehicle specifications, price, photos, descriptions, location, listing status, saved vehicles, and comparison activity.
• Communication data: enquiries, reports, moderation notes, and messages sent through Platform-supported channels.
• Payment data: records for Autolist services such as subscriptions or featured listings. Payment credentials are handled by payment providers and are not used by Autolist to process the purchase price of a vehicle.
• Technical and usage data: IP address, browser and device information, security logs, pages visited, and cookies or similar storage described in our Cookie Policy.

3. How we collect data

We collect data directly from you when you register, create or respond to a listing, request verification, contact support, submit a report, or purchase a Platform service. We also collect limited technical data automatically and may receive data from service providers, dealers, referral partners, public registers, or social sign-in providers where applicable.

4. Why we use personal data

• To create and secure accounts, publish listings, connect buyers and sellers, and provide support.
• To verify dealers and sellers, review listings, investigate reports, prevent fraud, and enforce our policies.
• To process and account for payments for Platform services.
• To communicate about accounts, listings, enquiries, service updates, and—where permitted—marketing.
• To understand and improve Platform performance, accessibility, reliability, and user experience.
• To comply with legal, tax, regulatory, security, and dispute-resolution obligations.

Depending on the activity, we rely on performance of a contract, compliance with law, legitimate interests, consent, or another lawful basis available under Kenyan data-protection law. You may withdraw consent where consent is the basis, without affecting earlier lawful processing.

5. Public listings and other users

Vehicle listings and dealer profiles are intended to be public. Information you choose to publish may be seen and shared by visitors. When you contact a seller or respond to an enquiry, the other party receives the information needed to continue that interaction. Avoid publishing identification documents, financial details, or other sensitive information in listings or enquiries.

6. Service providers and disclosures

We may share only the data needed with hosting, database, storage, security, email, messaging, mapping, analytics, identity-verification, AI-assistance, and payment providers that support the Platform. We may also disclose data where required by law, to protect users or the Platform, to investigate fraud, or as part of a business reorganisation subject to appropriate safeguards.

7. Assistive AI

Autolist may use assistive AI for tasks such as listing-quality suggestions, duplicate hints, search, or comparison research. AI does not automatically approve dealers, publish listings, or make final moderation decisions. Human review remains responsible for those decisions.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose collected, including account operation, listing history, fraud prevention, dispute handling, and legal, tax, or reporting duties. Retention periods vary by data type. We may retain limited records after account closure where law or legitimate security needs require it.

9. Your rights

Subject to applicable law, you may ask to be informed about our use of your data, access it, correct inaccurate or misleading data, object to certain processing, request deletion or restriction, withdraw consent, or obtain portable data where applicable. Send requests to support@autolist.co.ke. We may need to verify your identity and may retain data where the law requires it.

10. International transfers

Some service providers may process data outside Kenya. Where that happens, we use contractual, technical, organisational, or other safeguards required by applicable law.

11. Security and data breaches

We use access controls, encryption where appropriate, logging, backups, and operational safeguards designed to protect personal data. No online service can guarantee absolute security. Where a notifiable personal-data breach occurs, we will notify the Office of the Data Protection Commissioner and affected people as required by law.

12. Children

The Platform is not intended for people under 18, and people under 18 may not register or list a vehicle.

13. Updates and complaints

We may update this policy when the Platform or legal requirements change. The effective date above identifies the current version. You may also learn about your rights or lodge a complaint with the Office of the Data Protection Commissioner.