Privacy Policy

Afrensics Limited ("Afrensics", "we", "us", or "our") is a technology company registered in Kenya and operating from Nairobi. We provide the BiloHub business operating system and related cybersecurity and software development services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. By using our services, you agree to the terms of this policy. Company Registration: Afrensics Limited Registered Office: Nairobi, Kenya Contact: info@aedisecurity.com

We collect the following categories of personal data: Account Data: Name, email address, phone number, company name, job title, and password when you create a BiloHub account. Usage Data: Information about how you use our platform, including features accessed, pages visited, actions taken, and time spent. Payment Data: Billing information, payment method details (processed securely through PayStack), and transaction history. We do not store full card numbers on our servers. Communication Data: Messages, emails, and other communications you send us or through the platform. Technical Data: IP address, browser type and version, device identifiers, time zone, operating system, and other technology on the devices you use to access our services. Cookies: We use cookies and similar tracking technologies as described in our Cookie Policy.

We use your personal data to: • Provide, operate, and improve our services • Process payments and prevent fraudulent transactions • Send service notifications, security alerts, and support messages • Send marketing communications (only with your consent) • Respond to customer service requests and support needs • Comply with legal obligations under Kenyan law • Conduct analytics to understand how our services are used • Ensure the security of our platform and users

Your data is stored on secure cloud infrastructure. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include: encrypted data transmission (TLS/SSL), access controls, regular security assessments, and employee training on data protection. Data is retained for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time.

We do not sell, trade, or rent your personal data to third parties. We may share your data with: Service Providers: Trusted third-party vendors who help us operate our platform (e.g., PayStack for payments, cloud hosting providers). These parties are contractually bound to protect your data. Legal Requirements: When required by law, court order, or government authority in Kenya or other applicable jurisdictions. Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

Under the Kenya Data Protection Act, 2019, you have the following rights: • Right to be Informed: Know what data we collect and how we use it • Right of Access: Request a copy of your personal data we hold • Right to Rectification: Request correction of inaccurate data • Right to Erasure: Request deletion of your personal data • Right to Restrict Processing: Request that we limit how we use your data • Right to Data Portability: Receive your data in a portable format • Right to Object: Object to certain types of processing To exercise any of these rights, email us at: info@aedisecurity.com

We use cookies and similar technologies to improve your experience. See our full Cookie Policy for details on the types of cookies we use and how to control them. You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our services.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us at info@aedisecurity.com and we will take steps to remove that information.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by posting a prominent notice on our website. The "Last Updated" date at the bottom of this page will always reflect the most recent revision. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: Email: info@aedisecurity.com Data Protection Officer: dataprotection@aedisecurity.com Address: Nairobi, Kenya For complaints about our handling of your personal data, you may also contact the Office of the Data Protection Commissioner (ODPC) Kenya.