Data Processing Notice
How TaxOS (Tuzidi Ltd) processes your data under the Kenya Data Protection Act, 2019. We are registered with the Office of the Data Protection Commissioner (ODPC).
What we process
Your KRA PIN and the tax-compliance data KRA returns for it (registration status, obligations, TCC, licences), documents you upload for verification, and basic account details (name, email). We collect only what is needed to provide the service.
Why, and our lawful basis
To verify tax compliance, monitor your obligations, and keep tamper-evident evidence of the checks we run. Our lawful basis is your consent, which you give when you create your account and can withdraw at any time.
Retention
Compliance evidence is retained for 7 years to meet Kenyan tax-record obligations, then reviewed. This minimum-keep duty means some records cannot be deleted on request while the obligation applies.
Your rights
You may request access to, or correction of, your personal data, object to processing, or ask about erasure. Contact our Data Protection Officer at [email protected]. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
Withdrawing consent
You can withdraw consent at any time from Settings → Privacy & consent in your TaxOS workspace. When you do, TaxOS stops processing your data with KRA. You can restore consent later to resume.
This notice is provided for transparency and is being finalised with counsel; it does not constitute legal advice.