Privacy Policy

How We Collect, Use, and Protect Your Information

Last updated: August 2025

Table of contents

Welcome to our Privacy Policy

At CarStrel, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this Privacy Policy carefully.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

This Privacy Policy should be read in conjunction with our Terms of Service, which governs your use of the Service.

Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Service, and information from third-party sources.

Information You Provide to Us

  • Account Information: Name, email address, phone number, profile photo, and location
  • Vehicle Information: Vehicle details, photos, VIN numbers, maintenance records, and pricing information
  • Payment Information: Payment method details (processed securely through third-party providers)
  • Communication Data: Messages, reviews, and other communications sent through the platform

Information We Collect Automatically

  • Usage Data: Pages visited, search history, time spent on pages, and interaction data
  • Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
  • Location Data: General location information based on your IP address or device settings
  • Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies

How We Use Your Information

We use the information we collect for various purposes, including:

  • To provide, maintain, and improve our Service
  • To process transactions and send related information
  • To send you technical notices, updates, security alerts, and support messages
  • To respond to your comments, questions, and requests
  • To monitor and analyze trends, usage, and activities in connection with our Service
  • To detect, prevent, and address technical issues and fraudulent activity
  • To personalize and improve your experience on our Service
  • To send you marketing communications (with your consent)

We do not sell your personal information to third parties. We may share your information only as described in this Privacy Policy.

Information Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.

Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Other Users

Your public profile information (name, photo, ratings) and vehicle listings may be visible to other users of the Service. We facilitate communication between users but do not directly share your email, phone, or address.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Our security measures include:

  • End-to-end encryption for sensitive data
  • Secure servers with 24/7 monitoring
  • Regular security audits and penetration testing
  • Multi-factor authentication options
  • Access controls and authentication protocols
  • Secure backup systems with encryption

In the event of a data breach that affects your information, we will notify you within 72 hours via email and platform notification, in accordance with applicable data protection laws.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access: The right to access and receive a copy of your personal information
  • Rectification: The right to correct inaccurate or incomplete information
  • Erasure: The right to request deletion of your personal information
  • Restriction: The right to restrict processing of your personal information
  • Portability: The right to receive your data in a structured, machine-readable format
  • Objection: The right to object to processing of your personal information
  • Withdraw Consent: The right to withdraw consent where processing is based on consent

You can exercise these rights by contacting us at privacy@carstrel.com or through your account settings. We will respond to your request within 30 days.

If you are located in Kenya, you also have the right to lodge a complaint with the Office of the Data Protection Commissioner if you believe we have not adequately addressed your concerns.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

Types of cookies we use:

  • Essential Cookies: Required for the Service to function properly
  • Performance Cookies: Help us understand how visitors interact with our Service
  • Functionality Cookies: Remember your preferences and settings
  • Targeting Cookies: Used to deliver relevant advertisements (with your consent)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Account information is retained for as long as your account is active. Transaction records are retained for 7 years in accordance with financial record-keeping requirements. Marketing data is retained until you opt out or request deletion.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

Contact Information

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@carstrel.com

Data Protection Officer: dpo@carstrel.com

Phone: +254 XXX XXX XXX

Address: CarStrel Privacy Department, Nairobi, Kenya