Privacy Policy
Last updated: 3 November 2026
This policy explains what personal information Car Marketplace collects when you use carmarketplace.co.ke and the Car Marketplace Kenya Android app (together, the “Service”), what we do with it, and the choices you have. The app shows the same website, so this policy covers both. We handle personal data in line with Kenya's Data Protection Act, 2019.
Who we are
Car Marketplace (also known as Car Marketplace Kenya) operates the Service. You can contact us about anything in this policy by phone on +254719838935 or on WhatsApp.
What we collect
- Account details: your name, email address, phone number (if you give it) and a password. Passwords are stored only in scrambled (hashed) form; we cannot read them. If you use Continue with Google, Google tells us your name, email address and that the email is verified. We never receive your Google password.
- Listings you create: vehicle details, description, location, price and the photos you upload.
- Messages and requests: enquiries you send to sellers, service orders, insurance requests, donations and coupon use, including the name, phone number, email and message you type in.
- Payments: when you pay (for example by M-Pesa) we record the amount, phone number, status and payment reference. We never see or store your M-Pesa PIN or card details.
- Favourites and notifications: the cars you save and your notification preferences.
- Technical data: standard server logs (IP address, browser or app version, pages requested, time) used for security and troubleshooting.
We do not use advertising or analytics trackers, and the Android app does not collect an advertising ID.
How we use your information
- To create and run your account, and to sign you in.
- To show your listings to buyers and let buyers contact sellers.
- To process payments, service orders and subscriptions.
- To send you messages about your account, listings, enquiries and orders, and to reset your password when you ask.
- To keep the Service secure, prevent fraud and abuse, and fix problems.
- To meet legal obligations.
We do not sell your personal information.
Who can see it
- The public: your listing, its photos and the contact details you choose to show on it are visible to anyone.
- Sellers: when you send an enquiry, the seller receives the details you entered.
- Service providers that help us run the Service, only as needed for that purpose: our hosting provider, our database provider, our email-delivery provider, Google (when you choose to sign in with Google) and payment providers such as Safaricom M-Pesa.
- Authorities, where the law requires it.
Some of these providers operate servers outside Kenya, so your information may be processed in other countries. We only use providers that protect data with appropriate safeguards.
Cookies and the app
We use a small number of cookies that the Service needs to work: a secure session cookie that keeps you signed in, and a cookie that remembers your saved cars. We do not use advertising cookies. The Android app keeps the same session cookie on your phone so you stay signed in.
Camera and photos: when you add photos to a listing, the app lets you take a picture or choose one using your phone's own camera or gallery screen. The app does not browse your gallery, and a picture is uploaded only when you submit it. Sharing: if you share a car through the app, the content you share is passed to the app you choose.
Security
The Service is served over HTTPS, passwords are hashed, and access to personal data is restricted. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you think your account has been misused.
How long we keep it, and deleting your data
We keep your information while your account is active. You can ask us to delete your account, your listings and your personal data at any time by contacting us using the phone number or WhatsApp above from the phone number or email address registered on the account, and we will confirm once it is done. Some records, such as payment records, may be kept for as long as the law or our accounting obligations require.
Your rights
You may ask us to show you the personal data we hold about you, correct it, delete it, or stop using it for a particular purpose. Contact us using the details above. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes to this policy
If we change this policy we will post the new version on this page and update the date at the top. Please check back from time to time.