Privacy Policy

1. Introduction

Welcome to Mash Poa, Kenya's trusted platform for online bus ticket bookings, operated by Voltic Kenya Limited.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website or use our mobile app. Mash Poa is committed to maintaining the highest standards of privacy and transparency in compliance with the Kenya Data Protection Act (2019).

By using Mash Poa, you consent to the practices described in this policy.

2. Information We Collect

Mash Poa collects data to improve user experience, ensure smooth ticketing, and enhance service reliability. The types of data we collect include:

• Personal Information: Your name, contact number, email, and identification details for verification and ticketing.
• Payment Information: Mobile money such as M-Pesa, bank, or card payment details to process secure transactions.
• Travel History and Preferences: Routes, dates, and operator choices to improve future recommendations.
• Device and Usage Data: IP address, browser type, operating system, and site interaction patterns for analytics and platform optimization.

3. Purpose of Collecting Personal Data

Your personal information enables us to deliver a smooth, personalized, and secure booking experience. Specifically, we use it to:

• Process and confirm ticket bookings and payments.
• Facilitate boarding and check-in with bus operators.
• Provide customer service and resolve issues quickly.
• Improve website performance and personalize recommendations.
• Send updates, notifications, and occasional promotional offers.
• Detect fraud, ensure security, and meet legal obligations.

4. Data Sharing and Third-Party Disclosure

Mash Poa values your privacy and only shares data when necessary to complete your travel booking.

We may share limited data with:

• Bus Operators: To issue tickets, verify passenger manifests, and facilitate boarding.
• Payment Providers: To process and confirm payments securely.
• Regulators or Law Enforcement: When legally required under Kenyan law.

All third parties are bound by strict confidentiality and must comply with the Kenya Data Protection Act (2019).

5. Data Security and Retention

Mash Poa uses industry-standard security measures to safeguard your information, including encryption, access controls, and secure hosting environments.

We retain your data only as long as necessary for service delivery, legal, or regulatory requirements. After this period, your data is anonymized or securely deleted in accordance with best practices.

6. Your Privacy Rights

As a user, you have full control over your personal data. Under Kenyan law, you can:

• Request access to your personal data.
• Correct or update inaccurate information.
• Request deletion of your data, subject to legal retention limits.
• Withdraw consent for promotional communications.
• File a complaint with the Office of the Data Protection Commissioner (ODPC).

For any privacy-related request, reach us through the contacts below.

7. Cookies and Website Analytics

Mash Poa uses cookies and analytics tools to enhance site performance, improve user experience, and measure engagement.

You can manage or disable cookies in your browser settings, though this may affect certain functionalities on our platform.

8. Updates to This Privacy Policy

We may periodically update this policy to reflect new legal or operational requirements. Any updates will be published on our website with the revised "Last Updated" date.

We encourage users to review this page regularly to stay informed of how we protect your data.

9. Contact Information

For any inquiries, privacy requests, or complaints, contact: