Privacy Policy
How PHELP semajob collects, uses, retains, and protects your personal data under the Kenya Data Protection Act, 2019.
Last updated: August 2026
1. Introduction
PHELP semajob is a household-to-nanny matching platform operating in Kenya. We connect Kenyan households with vetted nannies and househelp through published, searchable profiles.
This Privacy Policy explains how PHELP semajob collects, uses, retains, and protects personal data in line with the Kenya Data Protection Act, 2019 (“the DPA 2019”). It applies to every nanny, household, and visitor who uses our platform.
2. Data Controller
PHELP semajob is the data controller for the purposes of the DPA 2019. We decide why and how your personal data is processed, and we are responsible for keeping it safe and using it lawfully.
If you have any question about how your personal data is handled, you may contact our Data Protection Officer at privacy@phelp-semajob.com (see Section 10, Contact).
3. Data We Collect
We only collect the personal data we need to operate the matching service. The categories of data we collect are:
- From nannies: full name, ID number, tribe, age, gender, years of experience, training and qualifications, face photo, and M-Pesa phone number.
- From households: name, phone number, and ID number.
- From all users: account activity, safety reports (including OB numbers), and audit-log entries generated when you use the platform.
4. How We Use Your Data
We process your personal data for the following purposes:
- Profile listing — publishing searchable nanny profiles on the platform.
- Matching — helping households find suitable nannies based on age, tribe, gender, experience, and training.
- Messaging — enabling secure communication between matched households and nannies.
- Payments — processing listing fees, household unlock fees, reactivation fees, and M-Pesa payouts to nannies.
- Referrals — attributing and rewarding referrals under our referral programme.
- Compliance — meeting our obligations under the DPA 2019, including audit logging and responding to data-subject requests.
5. Legal Basis for Processing
We rely on the following lawful bases under the DPA 2019:
- Consent (DPA 2019, Section 30) — you give clear, non-preticked consent at registration before we publish your profile or process your data for matching.
- Contract performance — processing necessary to deliver the matching, messaging, and payment services you have signed up for.
- Legal obligation — processing required to comply with Kenyan law, including record-keeping and audit requirements.
6. Data Retention
We keep your personal data only for as long as we need it:
- 12-month inactivity soft-deletion — if a nanny profile is inactive for 12 months, it is automatically hidden from public listings (soft-deleted). The data is retained securely so you can reactivate it.
- 3-month listing expiry — published nanny listings expire after 3 months unless reactivated, after which the profile is no longer shown publicly.
- You may request earlier erasure at any time through the Right to be Forgotten (see Section 7).
7. Your Rights
Under the DPA 2019 you have the following data-subject rights. All of them can be exercised from the Privacy & Security dashboard in your account:
- Right of Access — download a copy of your personal data, including audit-log entries about you.
- Right to Rectification — correct inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”) — request permanent deletion of your account and data.
- Right to Object to Marketing — opt out of marketing communications at any time.
- Right to Data Portability — receive your personal data in a structured, machine-readable format.
8. Data Security
We protect your personal data using technical and organisational measures:
- Masking of sensitive data on public profiles — phone numbers, ID numbers, and addresses are never shown publicly.
- Admin audit logging — every sensitive document view, download, and admin view of full unmasked contact details (phone, address, ID) is recorded in the Admin Audit Log.
- Access controls — only authorised administrators can access unmasked data, and every access is auditable.
9. Data Sharing
We do not sell your personal data. We share it only in the following limited circumstances:
- With matched households — after a household pays the unlock fee, the matched nanny’s full contact details are shared with that household.
- With our administrators — admin access to full unmasked contact details is audited in the Admin Audit Log.
- Where required by law — we may disclose data to Kenyan authorities where we are legally obliged to do so.
10. Contact
If you have any question, request, or complaint about how PHELP semajob handles your personal data, please contact our Data Protection Officer:
- Email: privacy@phelp-semajob.com
- You can also exercise any of your data-subject rights from the Privacy & Security dashboard in your account.
Exercise your data rights
Access, rectify, erase, or port your personal data from the Privacy & Security dashboard.