Data Deletion Instructions
Effective date: 24 April 2026 · Last updated: 24 April 2026
This page explains how to request the deletion of personal data that SaccoShares (a product of Play360 Solutions LTD) holds about you, including any data obtained via Facebook Login. Your right to erasure is protected under Section 26(c) of the Kenya Data Protection Act, 2019.
1. How to Submit a Deletion Request
To request deletion of your data, send an email to privacy@saccoshares.co.ke with the subject line: "Data Deletion Request".
Include the following in your email:
- Your full name as registered on SaccoShares.
- The email address or phone number associated with your account (or confirm that you signed in via Facebook Login).
- A brief statement that you are requesting deletion of your personal data in accordance with Section 26(c) of the Kenya Data Protection Act, 2019.
You do not need to provide a reason for your request. We may ask you to verify your identity before processing the request to ensure we are deleting the correct data.
2. What Will Be Deleted
Upon a verified deletion request, we will delete:
- Your account profile: name, email address, phone number, WhatsApp number, profile picture.
- Any OAuth tokens linked to your account (Google, Facebook).
- All active sessions associated with your account.
- All listings you created that are still active or pending.
- Inquiry records where you are the buyer (your name, phone number, and message), subject to the retention exception in Section 3 below.
- Any subscription records not required for financial compliance.
Facebook Login data specifically: This includes your Facebook User ID, name, email address, and profile picture URL that were received from Facebook when you signed in. All of this data will be deleted as part of your account deletion.
3. What We Retain After Deletion
Certain data must be retained after account deletion to comply with our legal obligations. This retained data cannot be used to re-identify you for marketing or any non-compliance purpose.
| Data retained | Retention period | Legal basis for retention |
|---|---|---|
| M-Pesa payment records (receipt number, amount, phone number, date) | 7 years from transaction date | Legal obligation — Kenya Revenue Authority and the Income Tax Act require financial records to be kept for 7 years. |
| Aggregated, anonymised usage statistics | Indefinitely | Legitimate interest — data is fully anonymised (no personal identifiers) and cannot be attributed to any individual. |
4. Processing Timeline
We will acknowledge your request by email within 2 business days. We will complete the deletion and confirm it in writing within 14 days of verifying your identity, in accordance with the Data Protection (General) Regulations, 2021.
If we are unable to complete the deletion within 14 days (for example, due to the volume of requests), we will notify you of the expected completion date.
5. Your Right to Complain
If you are not satisfied with how we handle your deletion request, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC):
Britam Towers, 12th Floor, Hospital Road, Upper Hill, Nairobi
Email: complaints@odpc.go.ke
6. Contact
Play360 Solutions LTD (operating SaccoShares)
Nairobi, Kenya
Email: privacy@saccoshares.co.ke