Privacy Notice

1. Who is responsible

MobiDesk is run by Bith Agustine Atem Isaac, trading as "MobiDesk" in Kenya. For account and website data we are the data controller, meaning we decide how and why it is used. For the customer records a business stores in MobiDesk, that business is the controller and we process the data on its behalf.

2. What we collect and why

• Account details (name, email, password, phone): to create and secure your account — contract.
• Business details (name, location, hours, logo, cover photo, services, prices): to run your workspace and public booking page — contract.
• Customer and booking records entered by businesses or submitted on public booking pages (name, phone, bookings, payments, notes): to provide the service — contract / the business's legitimate interests.
• Support messages: to answer questions — legitimate interests.
• Technical data (IP address, device and browser type, usage logs): for security, fraud prevention and improving MobiDesk — legitimate interests.

We do not sell personal data or use it for third-party advertising.

3. Who we share it with

• Service providers that host and run MobiDesk (cloud hosting, database and storage).
• Paddle.com, our Merchant of Record, for selling plans, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

4. International transfers

Our providers may store data outside Kenya. Where they do, we rely on appropriate safeguards such as standard contractual clauses.

5. How long we keep it

We keep data while your account is active and as long as needed to provide the service and meet legal obligations. After that it is deleted or anonymised.

6. Security

We use appropriate technical and organisational measures, including encrypted connections, access controls that keep each business's data separate, and private storage for uploaded images.

7. Your rights

Under Kenya's Data Protection Act (and the GDPR where it applies) you can ask to access, correct, delete, restrict or move your data, object to processing, and withdraw consent. You can also complain to the Office of the Data Protection Commissioner (Kenya) or your local authority. We reply within one month. Email admin@mobidesk.click.

8. Cookies and storage

We only use essential browser storage to keep you signed in and remember small preferences (such as a closed announcement bar). We don't use analytics or advertising cookies.