1. Introduction
Nailab ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you use our platform that connects startup founders with mentors across Africa.
This policy applies to all users of our platform, including startup founders, mentors, and other participants in our ecosystem. By using our services, you agree to the collection and use of information in accordance with this policy.
2. Data Controller Information
Nailab
Email: ceo@nailab.co.ke
Phone: +254 790 492467
Address: Nairobi, Kenya
3. Information We Collect
3.1 For Startup Founders
- Personal information: Name, email address, phone number, location
- Professional information: Company name, industry, role, experience level
- Startup information: Business description, stage, funding status, team size
- Performance data: Business milestones, growth metrics, achievements
- Communication data: Messages with mentors, session notes, feedback
- Profile information: Photos, bio, goals, challenges
- Usage data: Platform activity, session attendance, resource downloads
3.2 For Mentors
- Personal information: Name, email address, phone number, location
- Professional information: Work history, expertise areas, qualifications
- Credentials: Education, certifications, professional achievements
- Service information: Mentorship approach, availability, rates
- Communication data: Messages with founders, session notes, feedback provided
- Performance data: Session ratings, reviews, success metrics
- Financial data: Payment information for mentorship services
3.3 Technical Data
- Device information: IP address, browser type, operating system
- Usage analytics: Pages visited, time spent, click patterns
- Cookies and tracking technologies
- Log files and error reports
4. Legal Basis for Processing (GDPR)
- Consent: When you explicitly agree to data processing
- Contract: To provide mentorship services and platform functionality
- Legitimate interests: To improve our services, ensure security, and communicate updates
- Legal obligation: To comply with applicable laws and regulations
5. How We Use Your Information
- Facilitate mentorship connections between founders and mentors
- Process and manage mentorship sessions and communications
- Provide personalized recommendations and matches
- Track business performance and milestone achievements
- Process payments and manage billing
- Send important platform updates and communications
- Improve our services through analytics and feedback
- Ensure platform security and prevent fraud
- Comply with legal requirements and resolve disputes
6. Data Sharing and Disclosure
6.1 Within the Platform
- Profile information visible to potential mentors/founders for matching
- Communication data shared between matched mentors and founders
- Performance metrics shared with relevant mentors (with consent)
6.2 Third Parties
- Service providers (payment processors, email services, analytics)
- Legal authorities when required by law
- Business partners for specific programs (with explicit consent)
- Professional advisors (lawyers, accountants) under confidentiality agreements
7. Data Security
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection principles
- Incident response procedures
8. Data Retention
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records (typically 7 years for financial data)
9. Your Rights Under GDPR
- Right of access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time
10. International Data Transfers
- Adequacy decisions by relevant authorities
- Standard contractual clauses
- Binding corporate rules
- Certification schemes
11. Cookies and Tracking
We use cookies and similar technologies to enhance your experience. You can control cookie settings through your browser preferences. For detailed information, please see our Cookie Policy.
12. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will take steps to delete the information promptly.
13. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. Continued use of our services constitutes acceptance of the updated policy.
14. Contact Information
15. Supervisory Authority
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.