Social Boost Africa ("we", "us", or "our") operates socialboost.africa. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read it carefully. By using our service, you consent to the data practices described in this policy.
Data We Collect
We collect the following categories of personal data:
- Account data:Full name, email address, phone number, country of residence, and account password (stored as a one-way hash — never in plain text).
- Order data:Social media username or profile/post URL required to deliver your order. We never collect, store, or request your social media account passwords.
- Payment data:Transaction reference numbers, payment method type, and billing currency. Full card numbers are never stored on our servers — all card processing is handled by PCI-DSS compliant third-party gateways.
- Technical data:IP address, browser type, device type, operating system, and pages visited on our platform (collected via server logs and analytics).
- Communications:Records of support tickets, live chat transcripts, and emails exchanged with our team.
How We Use Your Data
We use the personal data we collect only for the following purposes:
- ✓Order fulfilment — To process and deliver your social media services
- ✓Account management — To create and maintain your account, send login-related emails, and manage your balance
- ✓Customer support — To respond to your enquiries and resolve disputes
- ✓Platform improvement — To analyse usage patterns and improve our website, checkout flow, and service quality
- ✓Legal compliance — To meet our obligations under Kenyan law, tax regulations, and anti-fraud requirements
- ✓Transactional emails — Order confirmations, payment receipts, and refund notifications. You cannot opt out of these as they are essential to service delivery.
Data Sharing
We share your data only in the following limited circumstances:
- Payment processors:M-Pesa, Airtel Money, MTN Mobile Money, Stripe — receive only the transaction data necessary to process your payment, under their own privacy frameworks.
- SMM service providers:Our upstream SMM suppliers receive only your public social media URL to deliver ordered services. They do not receive your personal details.
- Legal authorities:We may disclose data when required to do so by law, court order, or government authority. We will attempt to notify you where legally permitted.
- Business transfers:If Social Boost Africa is acquired or merged, your data may be transferred to the new entity, which will be bound by this Privacy Policy.
Cookies & Tracking
We use the following types of cookies and tracking technologies:
| Type | Purpose | Can Opt Out |
|---|---|---|
| Essential | Session management, login state, shopping cart | No (required) |
| Analytics | Page views, user journey, conversion tracking | Yes |
| Preference | Currency selection, language, theme | Yes |
We do not use advertising or retargeting cookies.
Data Security
We implement industry-standard security measures to protect your personal data:
- ✓256-bit SSL/TLS encryption on all data transmitted between your browser and our servers
- ✓Passwords are hashed using bcrypt — they cannot be recovered even by our staff
- ✓Payment card data is never stored on our servers — handled exclusively by PCI-DSS certified processors
- ✓Regular security audits and penetration testing
- ✓Access to personal data is restricted to authorised staff on a need-to-know basis
Your Rights
You have the following rights regarding your personal data held by Social Boost Africa:
- Access:Request a copy of all personal data we hold about you.
- Correction:Request correction of inaccurate or incomplete personal data.
- Deletion:Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
- Portability:Request your data in a machine-readable format (CSV/JSON) for transfer to another service.
- Objection:Object to processing of your data for analytics or non-essential purposes.
To exercise any of these rights, email our Data Protection Officer at privacy@socialboost.africa. We process all requests within 30 days.
Data Retention
- Account data:Retained for 3 years after your last login, then automatically anonymised or deleted.
- Order records:Retained for 3 years for dispute resolution and service history.
- Payment records:Retained for 7 years to comply with Kenyan tax and financial regulations.
- Support tickets:Retained for 2 years after ticket closure.
- Analytics data:Aggregated and anonymised after 13 months.
Children's Privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected data from a child without verifiable parental consent, we will delete that data immediately.
If you are a parent or guardian and believe your child has provided personal data to us, please contact us at privacy@socialboost.africa.
Contact Our Data Protection Officer
For all privacy-related requests, data access requests, or concerns about how we handle your data: