Legal & Policies

Privacy Policy

Last updated  04 October 2026

BilaFundi Works Privacy Policy

1. Introduction

BilaFundi Works ("BilaFundi", "we", "us", or "our") operates a global construction and infrastructure outsourcing platform headquartered in Nairobi, Kenya.

BilaFundi connects clients, property owners, contractors, technical handymen, service providers, material suppliers, organisations, and other construction and infrastructure professionals.

This Privacy Policy explains:

  • What personal information we collect;

  • How we collect it;

  • Why we use it;

  • How we protect it;

  • Who we share it with;

  • Where it may be processed;

  • How long we retain it;

  • How cookies and similar technologies are used; and

  • The rights available to individuals regarding their personal information.

BilaFundi acts as a data controller for personal information processed for its own platform operations, subject to the particular circumstances of the processing.

Our primary data-protection framework is Kenya's Data Protection Act, 2019, together with applicable regulations and guidance.

Where users are located in other jurisdictions, additional privacy and data-protection laws may apply. Where required, BilaFundi will respect applicable rights and obligations under those laws.

2. Who This Policy Applies To

This Privacy Policy applies to personal information relating to individuals who:

  • Visit the BilaFundi website;

  • Create BilaFundi accounts;

  • Use client features;

  • Register as providers;

  • Represent organisations;

  • Post projects;

  • Post or apply to tenders;

  • Submit service listings;

  • Request cost estimates;

  • Communicate with other users;

  • Make or receive payments;

  • Contact customer support;

  • Participate in referral programs;

  • Submit reviews or other content; or

  • Otherwise interact with BilaFundi.

3. Information We Collect

The information we collect depends on how you use BilaFundi.

3.1 Identity and Contact Information

We may collect:

  • Full name;

  • Email address;

  • Telephone number;

  • Country;

  • City or region;

  • Username;

  • Profile information; and

  • Account identifiers.

Where necessary for verification, we may also request:

  • National identification information;

  • Passport information;

  • Business registration information;

  • Professional registration information; or

  • Other verification information.

We will seek to collect only information reasonably necessary for the relevant purpose.

4. Professional and Provider Information

If you register as a provider, we may collect:

  • Profession or trade;

  • Skills;

  • Qualifications;

  • Certifications;

  • Licences;

  • Years of experience;

  • Service categories;

  • Service areas;

  • Portfolio information;

  • Portfolio images;

  • Business information;

  • Previous work information;

  • Provider descriptions; and

  • Other information you choose to publish.

This information may be displayed to clients, organisations, or other users where necessary for the operation of the BilaFundi marketplace.

Users are responsible for ensuring that professional information they provide is accurate.

5. Organisation Information

If you register or operate an account on behalf of an organisation, we may collect:

  • Organisation name;

  • Company or agency name;

  • Registration number;

  • Tax or VAT information;

  • Organisation type;

  • Business address;

  • Government-entity information;

  • Authorised representative information;

  • Contact information; and

  • Other information necessary to administer the organisation account.

You represent that you have appropriate authority to provide information and act on behalf of the organisation.

6. Project and Tender Information

BilaFundi may collect information that users submit when creating or responding to projects and tenders.

This may include:

  • Project descriptions;

  • Construction requirements;

  • Project budgets;

  • Project locations;

  • Tender documents;

  • Tender applications;

  • Quotations;

  • Proposals;

  • Project timelines;

  • Technical requirements;

  • Uploaded files;

  • Images;

  • Drawings;

  • Specifications;

  • Messages; and

  • Other project-related information.

Users should avoid submitting unnecessary sensitive personal information in project descriptions or public listings.

7. Location Information

Location information may be important to BilaFundi because the platform connects clients with providers operating in particular geographic areas.

Depending on the feature being used, we may process:

  • Country;

  • County, state, or province;

  • City or town;

  • Project location;

  • Provider service area;

  • Business location;

  • Address information submitted by users; and

  • Approximate location information derived from technical information where applicable.

Location information may be used to:

  • Match clients with relevant providers;

  • Identify providers operating in a particular area;

  • Display project locations;

  • Improve search results;

  • Support tender opportunities;

  • Provide location-based services; and

  • Prevent fraud and abuse.

Users should consider carefully whether an exact address needs to be included in publicly visible content.

8. Payment and Transaction Information

When you purchase a BilaFundi service, subscription, or other paid feature, we may collect information necessary to record and reconcile the transaction.

This may include:

  • Transaction reference;

  • Payment status;

  • Amount;

  • Currency;

  • Date and time;

  • Subscription information;

  • Payment-provider reference; and

  • Other transaction information.

Payments may be processed by third-party payment providers.

Where payment information is submitted directly to the payment provider, BilaFundi does not intentionally receive or store complete card numbers, card security codes, or mobile-money PINs.

Payment providers may process payment information under their own privacy policies, security controls, and legal obligations.

9. Information You Submit Through Communications

BilaFundi may process information you voluntarily provide through:

  • Messages;

  • Tender applications;

  • Support requests;

  • Contact forms;

  • Reviews;

  • Comments;

  • Project discussions;

  • Provider-client communications; and

  • Other platform communications.

This information may be processed to:

  • Facilitate communication;

  • Provide requested services;

  • Respond to support requests;

  • Investigate disputes;

  • Detect fraud;

  • Protect platform security; and

  • Comply with legal obligations.

Users should not send passwords, payment PINs, authentication codes, or other highly confidential credentials through ordinary BilaFundi communications.

10. Technical and Usage Information

When you access BilaFundi, we may automatically collect certain technical information.

This may include:

  • IP address;

  • Browser type;

  • Operating system;

  • Device type;

  • Device identifiers;

  • Session information;

  • Pages visited;

  • Referring pages;

  • Search activity;

  • Features used;

  • Interaction information;

  • Error information;

  • Security events;

  • Cookie identifiers; and

  • Similar technical information.

This information helps us operate, secure, analyze, and improve the platform.

11. Cookies and Similar Technologies

BilaFundi uses cookies and similar technologies for purposes including:

  • Authentication;

  • Session management;

  • Security;

  • Fraud prevention;

  • User preferences;

  • Analytics;

  • Platform performance;

  • Payment functionality; and

  • Advertising.

For detailed information, see our Cookie Policy.

12. How We Use Personal Information

We may use personal information for the following purposes.

12.1 Providing the Platform

We use information to:

  • Create and manage accounts;

  • Provide platform functionality;

  • Display profiles and listings;

  • Facilitate client-provider connections;

  • Facilitate tender participation;

  • Process requests;

  • Support communications;

  • Provide cost-estimation functionality; and

  • Deliver requested services.

12.2 Verification

We may use information to:

  • Verify provider identities;

  • Verify professional qualifications;

  • Verify organisation information;

  • Detect fraudulent accounts;

  • Protect the marketplace; and

  • Meet legal or contractual requirements.

12.3 Matching and Recommendations

We may process information to:

  • Match providers with clients;

  • Match providers with relevant tenders;

  • Recommend services;

  • Improve search results; and

  • Identify potentially relevant opportunities.

12.4 Payments

We use transaction information to:

  • Process transactions;

  • Confirm payments;

  • Reconcile transactions;

  • Manage subscriptions;

  • Process refunds where applicable;

  • Prevent payment fraud; and

  • Maintain financial records.

12.5 Security and Fraud Prevention

We may process technical, account, transaction, and usage information to:

  • Detect suspicious activity;

  • Prevent fraud;

  • Detect automated abuse;

  • Investigate security incidents;

  • Protect users;

  • Protect BilaFundi;

  • Enforce our Terms and policies; and

  • Comply with legal obligations.

13. AI-Powered Features

BilaFundi may offer AI-powered features such as:

  • Cost estimation;

  • AI support;

  • Project assistance;

  • Content generation;

  • Search assistance;

  • Recommendations; and

  • Other AI-enabled functionality.

When you use an AI feature, relevant information that you submit may be sent to third-party AI providers to generate the requested output.

Current AI providers may include:

  • Anthropic, including Claude services; and

  • Google, including Gemini services.

Depending on the feature, information transmitted may include relevant text such as:

  • Project descriptions;

  • Cost-estimation information;

  • Support questions;

  • User requests; or

  • Other information necessary to generate the requested response.

BilaFundi seeks to limit information sent to AI providers to what is reasonably necessary for the relevant feature.

14. AI Provider Data Handling

Where BilaFundi uses enterprise or business-level AI services, we seek to use contractual and technical arrangements appropriate to the nature of the information being processed.

The applicable AI provider may process submitted information under its applicable:

  • Enterprise terms;

  • Data-processing agreements;

  • Security commitments; and

  • Privacy requirements.

AI services and providers may change as BilaFundi develops its platform.

Users should not submit unnecessary sensitive personal information into AI features.

15. AI-Generated Information

AI-generated information may not always be accurate.

BilaFundi does not guarantee that AI-generated:

  • Cost estimates;

  • Recommendations;

  • Technical information;

  • Project suggestions;

  • Explanations; or

  • Other outputs

are accurate, complete, current, or suitable for a particular project.

Users should independently verify information that could materially affect construction, financial, engineering, legal, safety, or procurement decisions.

16. Who We Share Information With

BilaFundi does not sell personal information as a business model.

We may share information where reasonably necessary to operate the platform, provide requested services, protect users, or comply with legal obligations.

Recipients may include the following categories.

16.1 Other BilaFundi Users

Depending on platform functionality, certain information may be visible to other users.

For example:

  • Provider profiles may be visible to clients;

  • Service listings may be publicly or selectively visible;

  • Tender applications may be visible to the relevant organisation;

  • Project information may be shared with relevant providers; and

  • Messages may be accessible to the participants in the relevant communication.

Users should therefore consider carefully what information they publish.

17. Payment Providers

We may share necessary information with payment providers to facilitate:

  • Payments;

  • Payment verification;

  • Refunds;

  • Transaction reconciliation;

  • Fraud prevention; and

  • Payment support.

Payment providers may process information according to their own applicable privacy policies and legal obligations.

18. AI Service Providers

Relevant information may be shared with our AI service providers where necessary to provide AI-powered functionality.

These providers may include:

  • Anthropic; and

  • Google.

The information shared will depend on the specific AI feature being used.

BilaFundi seeks to minimize unnecessary information sent to these services.

19. Analytics and Security Providers

We may share or make available technical information to service providers supporting:

  • Google Analytics;

  • Microsoft Clarity;

  • Google reCAPTCHA;

  • Security monitoring;

  • Fraud prevention;

  • Website performance; and

  • Platform reliability.

These providers may independently process technical information according to their applicable terms and privacy policies.

20. Hosting and Infrastructure Providers

BilaFundi may use third-party infrastructure providers to host and operate the platform.

Our infrastructure providers may include DigitalOcean and other providers we may engage from time to time.

They may process information necessary to:

  • Host databases;

  • Store files;

  • Operate servers;

  • Deliver platform functionality;

  • Maintain backups;

  • Monitor infrastructure; and

  • Maintain system security.

Infrastructure providers are not authorized to use BilaFundi user information for unrelated purposes except as permitted by their contractual arrangements and applicable law.

21. Email and Communication Providers

BilaFundi may use third-party providers such as ZeptoMail to deliver transactional communications.

These communications may include:

  • Account verification;

  • Password-reset emails;

  • Payment receipts;

  • Tender notifications;

  • Security alerts;

  • Service notifications; and

  • Other necessary platform communications.

22. Advertising and Google AdSense

BilaFundi may display third-party advertisements on certain parts of its website, including its blog.

Where Google AdSense is used, Google and its advertising partners may use cookies or similar technologies to:

  • Deliver advertisements;

  • Measure advertising performance;

  • Personalize advertisements where permitted; and

  • Provide relevant advertising.

Advertising technologies may process information about your browser, device, interaction with advertisements, and visits to websites.

BilaFundi does not sell personal information directly to advertisers.

Advertising providers may process information according to their own policies and applicable law.

23. Managing Personalized Advertising

Depending on your location and applicable advertising settings, you may be able to control personalized advertising through Google's advertising settings.

Browser and device settings may also provide controls for cookies and advertising identifiers.

Because third-party advertising technologies and controls may change, users should consult the applicable provider's current privacy and advertising documentation.

24. Legal and Regulatory Disclosures

BilaFundi may disclose information where reasonably necessary to:

  • Comply with a legal obligation;

  • Respond to a lawful government request;

  • Respond to a court order;

  • Investigate suspected unlawful activity;

  • Protect the rights or property of BilaFundi;

  • Protect users or the public;

  • Prevent fraud;

  • Investigate security incidents; or

  • Establish, exercise, or defend legal claims.

We seek to limit disclosures to information reasonably relevant to the applicable purpose.

25. Business Transfers

If BilaFundi is involved in:

  • A merger;

  • Acquisition;

  • Restructuring;

  • Financing;

  • Sale of assets;

  • Corporate reorganization; or

  • Similar transaction,

personal information may be transferred as part of that transaction where legally permitted.

Where required, users will receive appropriate notice.

26. International Data Transfers

BilaFundi serves users globally and may use service providers whose infrastructure operates in countries outside the user's home country.

Personal information may therefore be transferred to or processed in jurisdictions including Kenya, the United States, and other countries where BilaFundi or its service providers operate.

Where personal information is transferred internationally, BilaFundi seeks to use appropriate contractual, technical, and organizational safeguards consistent with applicable data-protection requirements.

The specific safeguards may vary depending on:

  • The recipient;

  • The jurisdiction;

  • The type of information;

  • The applicable law; and

  • The services being provided.

27. Data Retention

BilaFundi retains personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

  • Whether your account remains active;

  • The type of information;

  • The purpose for which it was collected;

  • Legal requirements;

  • Tax and accounting requirements;

  • Fraud-prevention requirements;

  • Security requirements;

  • Dispute resolution;

  • Contractual obligations; and

  • Legitimate business requirements.

28. Account Deletion

You may request closure or deletion of your BilaFundi account by contacting:

info@bilafundi.com

Following a valid deletion request, BilaFundi will take reasonable steps to delete, anonymize, or de-identify personal information that is no longer required.

Some information may need to be retained because of:

  • Legal requirements;

  • Tax or accounting obligations;

  • Fraud prevention;

  • Security requirements;

  • Active disputes;

  • Investigations;

  • Enforcement of agreements; or

  • Other legitimate legal purposes.

Information contained in backups may remain for a limited period until those backups are securely overwritten or deleted according to applicable retention practices.

29. Your Privacy Rights

Subject to applicable law, you may have rights including the right to:

  • Request access to personal information;

  • Request correction of inaccurate information;

  • Request deletion;

  • Request restriction of processing;

  • Object to certain processing;

  • Request portability or export of information where applicable;

  • Withdraw consent where processing relies on consent;

  • Raise concerns about certain processing activities; and

  • Exercise other rights provided by applicable law.

The precise rights available to you depend on the jurisdiction and legal framework that applies to your circumstances.

30. Exercising Your Rights

To exercise a privacy right, contact:

info@bilafundi.com

Your request should, where possible, identify:

  • Your name;

  • Email address associated with your account;

  • The right you wish to exercise;

  • Relevant information or records; and

  • Any other information reasonably necessary to process your request.

We may request reasonable information to verify your identity and prevent unauthorized disclosure of personal information.

We will respond within the period required by applicable law.

31. Kenya Data Protection Rights

Where Kenya's data-protection laws apply, individuals may have rights provided under the Data Protection Act, 2019 and applicable regulations.

These may include rights relating to:

  • Access;

  • Correction;

  • Deletion;

  • Objection;

  • Restriction;

  • Data portability;

  • Withdrawal of consent where applicable; and

  • Other rights established by Kenyan law.

Individuals may also have the right to lodge a complaint with the relevant Kenyan data-protection authority where applicable.

32. European Economic Area and United Kingdom Users

Where applicable data-protection laws such as the GDPR or UK GDPR apply, individuals may have additional rights.

These may include:

  • Access;

  • Rectification;

  • Erasure;

  • Restriction;

  • Data portability;

  • Objection;

  • Rights concerning automated decision-making where applicable; and

  • Withdrawal of consent where consent is the applicable legal basis.

Where required, users may also have the right to lodge a complaint with their relevant data-protection supervisory authority.

33. Uganda and Tanzania

Where applicable, BilaFundi will consider relevant privacy and data-protection requirements in jurisdictions where it operates or provides services, including:

  • Uganda's Data Protection and Privacy Act, 2019; and

  • Tanzania's Personal Data Protection Act, 2022.

The specific rights and obligations applicable to an individual depend on the circumstances and applicable law.

34. Legal Bases for Processing

Depending on the applicable jurisdiction, BilaFundi may process personal information on one or more legal bases, including:

  • Performance of a contract;

  • Taking steps at the user's request before entering into a contract;

  • Compliance with legal obligations;

  • Legitimate interests;

  • Consent; and

  • Other lawful bases recognized by applicable law.

Examples include:

Contract: Creating an account and providing requested platform services.

Legal obligation: Maintaining tax, financial, or regulatory records.

Legitimate interests: Preventing fraud, securing the platform, and improving services.

Consent: Certain optional communications, analytics, advertising, or other activities where consent is legally required.

35. Direct Marketing and Communications

BilaFundi may send communications necessary to operate your account, including:

  • Security alerts;

  • Account notifications;

  • Transaction receipts;

  • Tender notifications;

  • Service updates;

  • Password-reset messages; and

  • Other essential communications.

These communications are generally necessary for the operation of the platform and may not be treated as optional marketing communications.

Where applicable, BilaFundi may also send promotional communications.

Users may unsubscribe from optional marketing communications using the available unsubscribe mechanism.

36. Data Security

BilaFundi applies reasonable technical and organizational safeguards designed to protect personal information.

These may include:

  • HTTPS/TLS encryption;

  • Secure authentication;

  • Password hashing;

  • Access controls;

  • Security monitoring;

  • Fraud prevention;

  • Logging;

  • Infrastructure controls;

  • Secure backups;

  • Vulnerability management; and

  • Incident-response procedures.

No internet-based service can guarantee absolute security.

For more information, see our Security and Data Protection Agreement.

37. Security Incidents and Data Breaches

If BilaFundi identifies a security incident affecting personal information, we will investigate and take reasonable steps to:

  1. Contain the incident;

  2. Investigate its cause;

  3. Assess the information affected;

  4. Remediate vulnerabilities;

  5. Restore affected services;

  6. Cooperate with relevant authorities where required; and

  7. Notify affected individuals or organizations where legally required.

Users should immediately report suspected account compromise or security incidents to:

info@bilafundi.com

38. Children's Privacy

BilaFundi is not directed toward individuals under the age of 18.

Users must be at least 18 years old to create and use a BilaFundi account unless applicable law permits otherwise.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited.

If you believe a child has provided personal information to BilaFundi, contact:

info@bilafundi.com

We will investigate and take appropriate action where required.

39. User Responsibilities

Users are responsible for:

  • Providing accurate information;

  • Updating inaccurate information;

  • Protecting account credentials;

  • Avoiding unnecessary disclosure of sensitive information;

  • Ensuring they have permission to submit information about other people;

  • Using appropriate security practices; and

  • Complying with applicable laws.

If you provide BilaFundi with personal information belonging to another person, you should ensure that you have the appropriate legal basis or authorization to provide that information.

40. Public Information

Some information submitted to BilaFundi may be made publicly available or visible to other platform users.

Examples may include:

  • Provider profiles;

  • Business information;

  • Service listings;

  • Portfolio information;

  • Reviews;

  • Public project information; and

  • Other information intentionally published by users.

Users should not publish information that they do not want other users or the public to see.

41. Third-Party Websites

BilaFundi may contain links to third-party websites or services.

Examples may include:

  • Payment providers;

  • External service providers;

  • Social media platforms;

  • AI providers;

  • Advertisers; or

  • Other websites.

BilaFundi is not responsible for the privacy practices of independent third-party websites.

Users should review the privacy policies of those services before providing information to them.

42. Cookies

BilaFundi uses cookies and similar technologies.

These may include:

  • Session cookies;

  • Security cookies;

  • CSRF protection;

  • reCAPTCHA;

  • Functional cookies;

  • Analytics cookies;

  • Payment cookies; and

  • Advertising cookies.

For more information, see our Cookie Policy.

43. Third-Party Advertising

Where BilaFundi displays advertising, third-party advertising providers may collect information through cookies or similar technologies.

Advertising providers may use this information for:

  • Advertising delivery;

  • Advertising measurement;

  • Fraud prevention;

  • Personalization; and

  • Other advertising-related purposes.

The availability of personalized advertising and applicable controls may depend on your location, browser, device, and applicable law.

44. Automated Processing

BilaFundi may use automated systems for purposes such as:

  • Fraud detection;

  • Security monitoring;

  • Search ranking;

  • Provider matching;

  • Recommendations;

  • Spam detection;

  • Abuse detection; and

  • AI-assisted functionality.

Where applicable law provides rights relating to significant automated decision-making, BilaFundi will handle such processing in accordance with those requirements.

45. Changes to This Privacy Policy

BilaFundi may update this Privacy Policy when:

  • Our services change;

  • We introduce new features;

  • We introduce or replace service providers;

  • Our data-processing practices change;

  • Applicable law changes; or

  • Security or privacy requirements evolve.

Material changes may be communicated through:

  • Email;

  • Platform notifications;

  • Website notices; or

  • Other appropriate communication methods.

The Last Updated date at the beginning of this Policy will indicate when the Policy was most recently revised.

46. Contact and Data Controller

BilaFundi Works

Role: Data Controller, where applicable

Headquarters: Nairobi, Kenya

Email: info@bilafundi.com

For privacy requests, users may use the subject:

"Privacy Request"

For data-protection concerns:

"Data Protection Concern"

For security incidents:

"Security Incident"

For account-related requests:

"Account & Data Request"

47. Final Privacy Commitment

BilaFundi recognizes that trust is essential to operating a global marketplace connecting clients, providers, and organisations.

We are committed to:

  • Collecting information responsibly;

  • Using personal information for legitimate purposes;

  • Limiting unnecessary data collection;

  • Protecting information through appropriate security measures;

  • Being transparent about third-party service providers;

  • Respecting applicable data-protection rights;

  • Taking reasonable steps to prevent unauthorized access and fraud; and

  • Continuously improving our privacy and security practices.

BilaFundi Works

Nairobi, Kenya

Email: info@bilafundi.com

© 2026 BilaFundi Works. All rights reserved.

info@bilafundi.com