This Privacy Policy explains how Lamazi Limited ("Lamazi", "we", "us", "our") collects, uses, stores, and protects personal information about massage therapists ("you", "Therapist") who register and operate on the Lamazi online booking platform ("Platform"). By registering as a therapist on the Platform, you acknowledge and agree to the practices described in this policy. This policy should be read together with the Therapist Terms and Conditions.
2. Information We Collect About Therapists
2.1 Identity and Professional Information
- Full legal name, date of birth, and national ID or passport number (for verification)
- Massage therapy qualifications, certifications, and licences
- Professional profile photo and biography
- Areas of specialisation and services offered
2.2 Contact and Location Information
- Email address and phone number
- Business location or service area
2.3 Financial Information
- M-Pesa number or bank account details for payouts
- Tax identification number (if applicable)
- Earnings history and payout records
2.4 Platform Activity Data
- Booking history, availability schedules, and session records
- Client ratings and reviews received
- Communications via the Platform's messaging system
- Device and usage data including IP address and login activity
3. How We Use Your Information
We use therapist information for the following purposes:
- To verify your identity and professional qualifications before onboarding
- To create and manage your therapist profile on the Platform
- To facilitate bookings and connect you with clients seeking your services
- To process payouts for completed sessions
- To send booking notifications, schedule updates, and operational communications
- To display your profile, ratings, and reviews to prospective clients
- To investigate complaints, resolve disputes, and enforce our policies
- To comply with legal and regulatory obligations under Kenyan law, including the Data Protection Act, 2019
4. Sharing of Your Information
We do not sell your personal data. We may share your information in the following circumstances:
- With clients: Your professional profile (name, photo, qualifications, ratings, and service information) is visible to clients searching the Platform.
- With payment providers: Your payout details are shared with our payment processing partners to facilitate earnings transfers.
- With verification providers: We may use third-party identity and credential verification services.
- With legal or regulatory authorities: As required by Kenyan law or valid legal process.
- In a business transfer: In the event of a merger or acquisition, your data may transfer to a successor entity.
5. Data Retention
We retain your personal data for the duration of your active relationship with Lamazi, and for a period of seven (7) years thereafter for audit, tax, and legal compliance purposes. You may request deletion of certain data by contacting lamazispa2022@gmail.com, subject to our legal retention obligations.
6. Your Rights Under the Data Protection Act, 2019
As a data subject under Kenyan law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your personal data (subject to legal retention obligations)
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
To exercise any of these rights, contact us at lamazispa2022@gmail.com.
7. Data Security
We apply appropriate technical and organisational security measures to protect your personal data, including encrypted data storage, access controls, and regular security assessments. You are responsible for keeping your account credentials secure.
8. Cookies
The Platform uses cookies to support your session, remember preferences, and analyse usage. You may manage cookie preferences through your browser settings.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on the Platform. Continued use of the Platform after changes constitutes acceptance of the revised policy.