Privacy Policy
This Privacy Policy (“Policy”) describes how VIDITEC DMCC (“Kulu,” “we,” “our,” or “us”) collects, uses, discloses, and processes your Personal Information when you visit our websites (collectively, the “Site”), download or use our digital wallet mobile application, or use any of our products or services (collectively, the “Services”) in Guinea, West Africa.
By accessing or using our Site and Services, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree, please do not access or use our Site or Services.
1. APPLICABLE LAW & DATA CONTROLLER & DATA PROCESSOR
- Local Compliance: We are committed to complying with applicable data protection laws and regulations in Guinea, as well as other relevant West African frameworks.
- Data Controller: For purposes of this Policy, DIWALGUI is the Data Controller, determining the purposes and means of controlling your Personal Information.
- Data Processor: For purposes of this Policy, VIDITEC DMCC is the Data Processor, determining the purposes and means of processing your Personal Information.
2. PERSONAL INFORMATION WE COLLECT
We collect information that could identify you alone or in combination with other information (“Personal Information”) as follows:
-
Information You Provide
- Account Details: When you create an account to use the Services, you may provide your name, email address, phone number, and other required information for.
- Communication Information: If you contact us for support or inquiries, we may collect your name, contact details, and the content of your message(s).
-
Information We Collect Automatically
- Log Data: When you access the Site, we may automatically collect information such as your IP address, browser type, and how you interact with our Site.
- Usage Data: We may automatically gather information about your use of the Services, including content viewed, features used, timestamps, and other device information.
- Analytics: We may use analytics tools (e.g., cookies, web beacons) to measure usage patterns and improve the user experience.
-
Card Payment Information
- We do not store or collect payment card details.
3. LAWFUL BASES FOR PROCESSING
We process your Personal Information under one or more of the following legal bases:
- Consent: Where you have given consent (e.g., for marketing communications, certain analytics).
- Contract: Where processing is necessary to fulfill a contractual obligation (e.g., to provide our Services).
- Legal Obligation: Where processing is required to comply with applicable law.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, such as enhancing security or improving our Services, provided those interests are not overridden by your rights.
4. HOW WE USE YOUR PERSONAL INFORMATION
We may use your Personal Information for the following purposes:
- Providing Services: To set up and maintain your account, process transactions, and deliver our Services.
- Communication: To respond to your inquiries, send administrative notifications, and provide support.
- Personalization: To tailor your user experience, including recommended features or content based on your preferences.
- Internal Research & Improvement: To conduct research, monitor usage trends, and enhance or develop new products and Services.
- Security & Fraud Prevention: To detect, investigate, and respond to security incidents or fraudulent activities.
- Legal Compliance: To comply with applicable laws, regulatory requirements, or governmental requests.
5. SHARING AND DISCLOSURE OF PERSONAL INFORMATION
We do not sell your Personal Information. However, we may share or disclose your data as follows:
- Vendors & Service Providers: We may share data with third-party vendors who perform services on our behalf (e.g., hosting, analytics). They process your data according to our instructions and are bound by confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, receivership, or sale of all or a portion of our assets, your Personal Information may be transferred to the acquiring entity.
- Legal Requirements: We may disclose Personal Information if required by law, court order, or other legitimate governmental request, or if necessary to protect our rights or the rights of others.
- Affiliates: We may share your Personal Information with our affiliated entities, who will use it in accordance with this Policy.
- Other Users: Certain information, such as your username or activities within the Service, may be visible to other users if you choose to engage in public features.
6. CROSS-BORDER DATA TRANSFERS
Your Personal Information may be transferred to and processed in countries other than Guinea where our servers, affiliates, or service providers are located. We take steps to ensure adequate protections are in place, such as using contractual clauses or other data transfer mechanisms recognized by applicable laws.
7. DATA RETENTION
We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law. Retention periods may vary depending on the type of data and the specific legal or operational needs:
- Account Information: Retained until the account is deleted or otherwise deactivated.
- Transaction Data: Retained as required for financial and regulatory compliance up to 7 years.
- Marketing Data: Retained until you opt-out or withdraw consent.
8. USER RIGHTS & CHOICES
In accordance with local laws, you may have the following rights over your Personal Information:
- Access: Request details about your Personal Information we hold.
- Rectification: Correct or update inaccurate or incomplete information.
- Erasure: Request deletion of your Personal Information, subject to legal exemptions.
- Restriction: Request that we limit processing of your Personal Information.
- Objection: Object to the processing of your Personal Information for specific purposes, such as direct marketing.
- Data Portability: Request a copy of your Personal Information in a structured, commonly used format.
- Withdraw Consent: Where processing is based on consent, you can withdraw at any time.
To exercise these rights or if you have questions, contact us at: privacy@kulu.com. We will respond within a reasonable time frame, in accordance with applicable laws.
9. COOKIES & TRACKING TECHNOLOGIES
We use cookies and similar technologies to:
- Recognize you and your device when you return to our Site.
- Remember your preferences and settings.
- Analyze Site performance and user engagement.
You can control cookies through your browser settings or dedicated tools. However, disabling cookies may affect the functionality and features of our Site or Services.
10. ADVERTISING & MARKETING
We may use your Personal Information to send you marketing communications or show you relevant advertisements. You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in the email or by contacting us at privacy@kulu.com. For targeted ads, you can manage your preferences through your device settings or any provided opt-out links.
11. MINORS
Our Services are not intended for individuals under the age of 18 years old. If you believe that a minor has provided us with Personal Information, please contact us at privacy@kulu.com and we will work to delete the information promptly.
12. SECURITY & BREACH NOTIFICATION
We employ reasonable physical, technical, and administrative measures designed to protect your Personal Information from unauthorized access, use, or disclosure. However, no security measures are infallible. If a security breach occurs, we will take appropriate steps in accordance with applicable laws, including notifying affected individuals and relevant authorities if required.
13. OPT-OUT MECHANISMS
- Analytics: You may opt-out of analytics tools where available (e.g., using a browser extension or our in-app settings).
- Third-Party Sharing: For non-essential data sharing, you can contact us at privacy@kulu.com to inquire about your opt-out options.
- Marketing Communications: You can unsubscribe from marketing emails by clicking the link in the email or contacting us at privacy@kulu.com.
14. CONTACT INFORMATION & DATA PROTECTION OFFICER (IF APPLICABLE)
For data protection inquiries, concerns, or to exercise your rights, please contact:
VIDITEC DMCC
Attn: Data Protection Officer
Email: privacy@kulu.com
Address:
Office 2705-D
JBC4, Cluster N
Jumeirah Lakes Towers
Dubai - United Arab Emirates
15. CHANGES TO THIS PRIVACY POLICY
We may update this Policy from time to time to reflect changes in our business, technology, legal requirements, or for other reasons. When we make changes, we will post the updated Policy on our Site and indicate the “Last Updated” date. Any changes become effective immediately upon posting.
Version: 1.1
Last Updated: January 13, 2025