Effective date: October 25, 2026

 Swiftkey Auto Services (“Swiftkey Auto,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data in accordance with the Constitution of Kenya and the Data Protection Act, 2019 (“DPA”). This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, contact us on WhatsApp, call us, visit our workshop, or use our mobile automotive services.

Who we are

Swiftkey Auto Services provides automotive locksmith and vehicle-electronics services in Kenya, including car key programming, replacement and spare keys, immobilizer and ECU-related services, airbag crash-data services, car radio unlocking, language conversion, diagnostics, and related mobile services.

For the purposes of the DPA, Swiftkey Auto Services is the data controller for personal data collected through its website, social-media pages, WhatsApp, phone calls, and workshop operations.

 Business name: Swiftkey Auto Services

Location: Kiambu Road, Nairobi, Kenya

Email: info@swiftkeyauto.co.ke

Personal data we collect

We collect only the information reasonably needed to provide a quote, verify vehicle ownership, perform a service, communicate with you, process payment, and maintain business records.

Information you provide

1.       Full name.

2.       Phone number and WhatsApp number.

3.       Email address, where provided.

4.       Physical location, estate, road, or service address.

5.       Vehicle make, model, year, registration number, VIN/chassis number, and key or immobilizer details.

6.       Description of the fault or service required.

7.       Photos or videos of your vehicle, key, dashboard warning, radio unit, or diagnostic screen, where relevant.

8.       Proof of vehicle ownership or authorisation to act on the vehicle, such as logbook details, sale agreement, identification documents, fleet authorisation, or insurance documents.

9.       Payment confirmation, M-Pesa transaction reference, invoice details, or receipt information.

10.    Feedback, complaints, reviews, and survey responses.

Information collected automatically

When you use our website or social-media pages, we may collect:

1.       IP address

2.       Device type and browser information

3.       Pages viewed and links clicked

4.       Date and time of visit

5.       Approximate location derived from IP address

6.       Cookies, pixels, and analytics data, where enabled

7.       CCTV and workshop records

8.       For security, safety, dispute resolution, and protection of customer vehicles, our premises may use CCTV. CCTV may capture your image, vehicle registration number, and movements while you are on the premises.

Why we collect your data

We process personal data for the following purposes:

1.       To respond to enquiries and provide quotations

2.       To verify that you own the vehicle or are authorised to request work on it.

3.       To schedule mobile visits, workshop appointments, or deliveries.

4.       To diagnose faults and perform key programming, ECU, immobilizer, airbag, radio, language-conversion, or diagnostic services.

5.       To maintain service records, warranties, invoices, and proof of work completed.

6.       To process payments and prevent fraud.

7.       To communicate about your booking, repair status, collection, warranty, or after-service support.

8.       To improve our services, website, customer service, and marketing.

9.       To comply with tax, accounting, consumer-protection, and legal obligations.

10.    To protect our staff, customers, property, and business against theft, fraud, and false claims.

Legal bases for processing

We rely on one or more of the following legal bases:

1.       Your consent, for example when you contact us on WhatsApp.

2.       Performance of a contract, where processing is necessary to provide the service you requested.

3.       Legal obligation, where we must retain invoices, tax records, or comply with lawful requests.

4.       Legitimate interests, such as fraud prevention, security, record-keeping, service improvement, and protection of our business, provided your rights are not overridden.

Vehicle ownership and anti-fraud checks

Car-key programming, immobilizer work, ECU services, and airbag crash-data services can affect vehicle security. To prevent theft, fraud, and unauthorised access to vehicles, we may require:

1.       Proof of ownership or authority to act for the owner

2.       National ID, passport, or other identification

3.       Vehicle logbook, sale agreement, fleet letter, insurance documents, or dealership authorisation

4.       Vehicle registration, VIN/chassis number, and key details

5.       Confirmation that the person requesting service is the owner or an authorised representative

6.       We use this information only to verify authority, document the job, protect customers, and comply with legal or insurance requirements. If you cannot provide sufficient proof of ownership or authorisation, we may decline or delay the service.

WhatsApp, calls, and social media

1.       If you contact us through WhatsApp, Facebook, Instagram, TikTok, phone, or SMS, we may keep the conversation, contact details, photos, vehicle information, and service instructions needed to handle your request.

2.       Please avoid sending unnecessary sensitive information, such as full ID images, bank-card details, passwords, or unrelated personal documents. Where identification is required, we will handle it confidentially and retain it only as long as necessary.

3.       Messages sent through WhatsApp or social-media platforms are also subject to the privacy policies and security practices of those platforms.

Sharing your personal data

We do not sell your personal data. We may share it only where necessary and with appropriate safeguards, including:

1.       Technicians and authorised staff who need the information to complete your service.

2.       Payment providers, such as M-Pesa, banks, or payment platforms, to confirm transactions.

3.       IT, website, cloud-storage, email, WhatsApp, accounting, or analytics providers that help us operate our business.

4.       Suppliers or specialist partners, where a specific job requires external technical support, subject to confidentiality obligations.

5.       Insurance companies, lawyers, auditors, or regulators, where required for claims, disputes, fraud prevention, or legal compliance.

6.       Law-enforcement authorities, where we are legally required to disclose information or where disclosure is necessary to prevent crime or protect safety.

7.       Where we use third-party service providers, we take reasonable steps to ensure they process personal data only on our instructions and with appropriate security measures. The DPA requires appropriate contractual and organisational controls for processors handling personal data.

8.       Some website, cloud, email, analytics, advertising, or messaging tools may store or process data outside Kenya. Where personal data is transferred outside Kenya, we will take reasonable steps to ensure the recipient provides an adequate level of protection and that the transfer is permitted under Kenyan data-protection law.

9.       Sensitive personal data should not be transferred outside Kenya without the data subject’s consent and confirmation of appropriate safeguards, unless another lawful exception applies.

How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected, including legal, tax, warranty, dispute-resolution, and business-record requirements.

How we protect your data

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, loss, alteration, disclosure, or destruction. These may include:

1.       Password-protected devices, email, and business accounts.

2.       Restricted access to customer records and job files.

3.       Secure storage of ownership documents and service records.

4.       Limited access for technicians based on job requirements.

5.       Secure disposal or deletion of data no longer needed.

6.       Staff confidentiality expectations and data-handling training.

7.       Backups, device locks, antivirus protection, and regular security reviews.

8.       Careful handling of diagnostic data, vehicle identifiers, and customer communications.

Data breaches

If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will investigate promptly, contain the incident, and notify the ODPC and affected individuals as required by Kenyan law.

Cookies and website analytics

Our website may use cookies and similar technologies to:

1.       Remember your preferences.

2.       Measure website traffic and performance.

3.       Understand which services and pages interest visitors.

4.       Improve website usability.

5.       Support advertising and remarketing, where enabled.

6.       You can control or delete cookies through your browser settings. Disabling some cookies may affect how parts of the website function.

How to exercise your rights

To access, correct, delete, or object to the processing of your personal data, contact us using the details below:

Swiftkey Auto Services

Email: info@swiftkeyauto.co.ke

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, suppliers, or Kenyan law. The updated version will be posted on this page with a new “Last updated” date.

Where changes materially affect how we use your personal data, we will take reasonable steps to notify you.

Contact us

For questions about this Privacy Policy or how we handle your personal data, contact:

Swiftkey Auto Services

Kiambu Road, Nairobi, Kenya

Email: info@swiftkeyauto.co.ke