1. Who we are
This policy explains how Beep Africa Technologies Limited (“Beep Africa”, “we”, “us”), formerly trading as HostPinnacle Bulk SMS, handles personal data when you visit beepafrica.com, use our dashboard at sms.beepafrica.com, call our API or SMPP services, or contact us.
For data about our own customers, website visitors and enquirers, we are the data controller. For the contact lists and messages our customers send through our platform, the customer is the data controller and we act as their data processor; see our Data Protection & Retention Policy.
2. Personal data we collect
- Account and identity data: name, company, job title, email, phone number, login credentials, KRA PIN and business registration documents (for sender ID registration).
- Billing data: invoices, M-Pesa, card or bank transaction references and eTIMS records. We don’t store full card numbers; card payments are handled by our payment providers.
- Service and usage data: messages sent, delivery reports, API and SMPP logs, IP addresses, device and browser information, and audit logs of actions in your account.
- Communications: calls, WhatsApp chats, emails and forms you send us, including support conversations, which may be recorded for quality and training.
- Website data: pages visited, referral source and cookie identifiers. See our Cookie Policy.
- Recruitment data: CVs and information you send when applying for a job.
3. How we use personal data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, delivering messages and support | Performance of a contract |
| Registering sender IDs and short codes with mobile network operators | Performance of a contract; legal obligation |
| Billing, tax and eTIMS invoicing, record keeping | Legal obligation |
| Preventing fraud, spam and abuse; keeping our platform secure | Legitimate interests; legal obligation |
| Improving our products and website | Legitimate interests |
| Sending you news and offers about our services | Consent, which you can withdraw at any time |
| Responding to regulators, courts and law enforcement | Legal obligation |
5. International transfers
Some providers process data outside Kenya. Where we transfer personal data abroad, we do so only as permitted by the Data Protection Act, 2019, for example where the recipient country has adequate safeguards or where appropriate contractual protections are in place.
6. How long we keep data
We keep personal data only as long as needed for the purposes above or as the law requires. Account and billing records are kept for at least five years for tax purposes. Details are in our Data Protection & Retention Policy.
7. How we protect data
We use technical and organisational measures appropriate to the risk, including encryption in transit, role-based access, sub-user permissions, IP-restricted access to our dashboard, API and SMPP, activity logging, staff confidentiality obligations and regular security reviews. No system is completely secure; if you find a vulnerability, please follow our Responsible Disclosure Policy.
8. Your rights
Under the Data Protection Act, 2019 you have the right to:
- Be informed of how your personal data is used
- Access the personal data we hold about you
- Object to processing, including direct marketing
- Ask us to correct false or misleading data, or to delete data
- Restrict processing in certain cases
- Data portability, where applicable
- Withdraw consent at any time, without affecting earlier processing
To exercise any right, email [email protected]. We may need to verify your identity, and we’ll respond within the period the law requires. If the request concerns a message you received from one of our customers, we’ll refer it to that customer as the data controller.
9. Marketing
We send marketing only where you’ve agreed or where the law allows. Every marketing message includes a way to opt out, and you can also ask us to stop at any time.
10. Children
Our services are for businesses and are not directed at children under 18. We don’t knowingly collect children’s personal data for our own purposes.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed, and we’ll tell customers about significant changes by email or in the dashboard.
12. Questions and complaints
Contact our data protection team at [email protected] or using the details below. If you’re not satisfied with our response, you can complain to the Office of the Data Protection Commissioner (ODPC), Kenya.
Contact us
Beep Africa Technologies Limited, 1st Floor, Studio House, Marcus Garvey Road, Kilimani, Nairobi (opposite chaka place).
Phone and WhatsApp: +254 725 333 888 · Contact form