Privacy Policy

1. Introduction

fbien ("we," "our," or "us") operates fbien.com and provides custom Order Management Systems for water delivery operators in Kenya. We are committed to protecting your privacy and handling your personal information with care and respect.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our water delivery management systems.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number (+254 format)
• Business Information: Business name, location, branch details, operational data
• Account Information: Login credentials, role assignments, user preferences
• Order Information: Customer orders, delivery addresses, bottle tracking, payment records
• Financial Information: M-Pesa transaction IDs, payment confirmations, reconciliation data
• Communication Data: Messages sent through WhatsApp, email, or our platform

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Location Data: GPS coordinates for delivery tracking (with permission)
• Performance Data: System logs, error reports, activity timestamps

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Process orders, manage deliveries, track bottles and deposits
• Payment Processing: Handle M-Pesa transactions, reconcile payments, generate invoices
• Communication: Send order updates, delivery notifications, system alerts via SMS/WhatsApp
• Analytics: Generate dashboards, reports, and business insights
• System Improvement: Enhance features, fix bugs, optimize performance
• Customer Support: Respond to inquiries, provide technical assistance
• Security: Prevent fraud, unauthorized access, and system abuse
• Compliance: Meet legal and regulatory requirements

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with trusted service providers who assist in operating our platform:

• InstantDB: Database and real-time data synchronization
• Safaricom M-Pesa: Payment processing and transaction verification
• Vercel: Hosting and deployment infrastructure
• Communication Services: SMS and WhatsApp message delivery

4.2 Business Transfers

If fbien is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.4 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• Access Control: Role-based permissions, multi-factor authentication
• Activity Logging: Complete audit trails for accountability
• Regular Backups: Automated data backups and disaster recovery
• Security Monitoring: Continuous monitoring for threats and vulnerabilities

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Transaction Records: Financial data retained for 7 years (Kenya tax law)
• Audit Logs: Activity logs retained for 2 years
• Deleted Accounts: Personal data deleted within 90 days of account closure

7. Your Rights

Under Kenyan data protection laws, you have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request limitation of data processing
• Withdraw Consent: Withdraw consent for data processing (where applicable)

To exercise these rights, contact us at hello@fbien.com or +254 789 684 590.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our services. You can control cookie preferences through your browser settings.

Types of cookies we use:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and preferences

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries outside Kenya, including the United States (where our hosting provider operates). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Effective Date" at the top. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: