Privacy Policy

This policy covers Reeng.id networking rings, digital profiles, company workspaces and purchase enquiries. It applies to account holders, team members, people viewing profiles and people sharing contact details.

Reeng determines how account administration, service security and purchase enquiries are handled. A company or independent profile owner determines how it uses the contacts it collects. Where we process company information on its instructions, we act as a processor under the applicable service and data-processing agreement. That company must give its staff and contacts its own privacy information.

• Account and profile: name, email, username, role, biography, contact details, photos, location you choose to publish, links and profile preferences.
• Company workspace: company details, membership, work email, job title, department, permissions, branding and ring assignments. Your company may supply these details when it invites or adds you.
• Connections and events: the name, email and optional phone number you share, the recipient, consent record, event attribution, and follow-up notes added by the recipient.
• Rings and service use: ring identifiers and profile associations, tap and interaction records, dates, device/browser information, IP address and security logs where the relevant service collects them. Tapping a ring does not itself share the visitor’s address book.
• Purchase and support: name, email, quantity, optional company and notes, correspondence, and delivery or transaction details needed for a confirmed order. Do not put sensitive personal information in a purchase note.

We use information needed to provide the account, profile, workspace or order you request on the basis of our contract with you, or steps you ask us to take before a contract. Required form fields allow us to provide that particular service; without them we may be unable to proceed. Optional fields can be left blank.

We rely on consent for a visitor’s contact exchange and, separately, for optional marketing or tracking that requires consent. A purchase enquiry or account registration does not subscribe you to promotional messages. You can withdraw consent without affecting earlier lawful processing.

Service protection, abuse prevention and proportionate operational reporting may rely on legitimate interests only after considering your rights and reasonable expectations. Accounting, lawful requests and required records rely on the relevant legal obligation. We do not treat acceptance of the Terms as blanket consent to every use of personal data.

A published profile is available to people with its link, QR code or ring tap, and may be found through search engines. Publish only information you intend to share. Visitors may save your contact card or copy information; later edits cannot recall copies already downloaded.

“Share my details” is voluntary and separate from viewing or saving a profile. The named recipient receives the details for the follow-up you agree to. For a company profile, authorised company users may access those contacts; leaving the company does not automatically delete its business records. Consent to an introduction is not unlimited consent to marketing or onward sale.

Company-managed fields and ring assignments are controlled by the organisation. Ask the company about its staff records and contact retention. You may also contact Reeng about our processing or for help directing a rights request. We do not sell personal data.

Depending on the service you use, information may be handled by providers of hosting, storage, communications, service security and delivery, and by professional advisers or authorities where necessary and lawful. Each provider should receive only the information needed for its task, under appropriate confidentiality and data-protection obligations.

Before transferring personal data outside Kenya, we must establish a lawful transfer basis and the safeguards required by Kenyan law. Acceptance of this policy alone is not consent to an overseas transfer. You may request information about the recipients, processing locations and safeguards applying to your data.

Links to another website, social network or messaging service take you to that provider’s own terms and privacy practices. Avoid sharing information there unless you are comfortable with those practices.

Information is kept only while needed for its stated purpose. Account information is needed while providing your service; enquiries while handling follow-up; and company contacts according to the company’s lawful instructions. Some records may need to remain longer for a specific legal obligation, a dispute or security investigation. We assess the purpose, record type and applicable requirement before retaining them, then delete or anonymise them when no longer needed.

Security measures must be appropriate to the information and include controlled access, authenticated account access, secure transmission, provider controls and incident handling. No system can promise absolute security. Where a personal-data breach meets the legal notification threshold, we must notify the ODPC and affected people as required by law.

Browser-held information is described in the Cookies & Browser Storage policy. Clearing browser data does not by itself delete records held by Reeng, a company or a person who has saved your contact.

Under Kenya’s data-protection framework, you can ask to be informed about processing, access your data, correct inaccurate information, object to processing, and request erasure, restriction or portability where the legal conditions apply. You may withdraw consent and object to direct marketing. You also have protections concerning decisions based solely on automated processing that significantly affect you.

Tell us which information or profile your request concerns. We may seek proportionate verification to protect your data, but not unnecessary identity documents. We will handle the request within the applicable statutory period, explain any lawful restriction or refusal, and explain your options to challenge it. A request does not require you to close your account.

The General Regulations provide seven days for access requests, fourteen days for a necessary correction and for a response to an erasure request, and thirty days for portability, subject to the applicable legal conditions. Access and correction are free. We will explain any lawfully permitted portability fee before charging it.

You may complain directly to the Office of the Data Protection Commissioner (ODPC). You do not have to complete our internal process first.

Reeng’s self-service accounts and purchases are intended for adults aged 18 or over. Do not create an account for a child or add a child’s information to a public profile or contact list. If you believe a child’s information has been provided, contact us so we can investigate and take appropriate protective action. Any service specifically involving children would require appropriate age checks, parental or guardian consent and safeguards for their best interests.

We will update the date on this page when the policy changes and provide appropriate notice of material changes. If a new use requires consent, we must ask separately before starting it. This policy is informed by Kenya’s Data Protection Act, 2019 and its regulations.