Privacy Policy for BiDir Business Solutions

.Personal Data Controller

BiDir Business Solutions is the controller responsible for your personal data. Although headquartered in Kenya, we operate globally and may transfer data across borders in accordance with applicable laws.

.Categories Of Personal Data We Collect

We collect personal data both voluntarily and automatically:

• Data You Provide Directly
  • Registration Information: Business name, business email, unique password, country of trade
  • Profile Details: Primary and additional business locations, personnel names, personnel pictures, working hours, service descriptions, photographs, and metadata for listings
  • Subscription & Billing: Billing contact information and payment details if you subscribe beyond the BiDir Free tier (note: BiDir does not process payments directly; payment data may be collected and stored by third-party payment processors)
• Automatically Collected Data
  • Device & Usage: IP address, device type, operating system, browser type, language settings, hardware identifiers
  • Location Data: Approximate location derived from IP address
  • Log Data: Service access times, pages viewed, referral URLs, and clickstream data
• Cookies and Tracking Technologies
  • Cookies: Session and persistent cookies to maintain login state, store preferences, and enable core functionality
  • Analytics: Third-party analytics tools (e.g., Google Analytics) for performance and behavioral insights

.How We Use Your Data

We use collected data for the following purposes:

• Account Management & Support: Create and manage your account, authenticate users, and respond to service requests or technical issues.
• Service Delivery: Provide, maintain, and improve the features of each membership tier (Free, Basic, SME), including trial management and renewal notifications.
• Communication: Send operational messages, updates, security alerts, and promotional materials (with your consent where required).
• Analytics & Research: Analyze usage patterns to enhance functionality, personalize content, and optimize user experience.
• Fraud Prevention & Compliance: Detect, prevent, and investigate fraudulent or unauthorized activities and enforce our Terms of Service.
• Legal Obligations: Disclose data as required to comply with legal processes, court orders, or regulatory requirements.

.Legal Bases For Processing Your Data

We process your personal data under the following lawful bases (where applicable):

• Consent: For marketing communications and non-essential cookies, where you have opted in.
• Contract Performance: To fulfill our obligations under your subscription agreement (e.g., account provisioning, billing notices).
• Legitimate Interests: To operate, secure, and improve the Service (e.g., analytics, fraud detection).
• Legal Compliance: To comply with laws, regulations, or legal obligations.

.International Data Transfers

Because BiDir operates worldwide, your data may be transferred to and processed in countries outside your jurisdiction. We implement appropriate safeguards (standard contractual clauses, data transfer agreements) to ensure adequate protection of your personal data.

.Data Retention

We retain your personal data only as long as necessary to provide the Service or comply with legal obligations. Upon account deletion or subscription cancellation, we will securely delete or anonymize personal data in accordance with our data retention policy (typically, 90 days), except where retention is required by law.

.Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal obligations).
• Restriction: Ask us to limit the processing of your data.
• Portability: Obtain and reuse your data across different services.
• Objection: Object to certain processing activities (e.g., direct marketing, profiling).
• Withdraw Consent: If processing is based on consent, you may withdraw it at any time (without affecting processing done prior to withdrawal).

To exercise these rights, please contact us at support@bidir.online. We may require verification of your identity before processing your request.

.Security Measures

We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including encryption, access controls, and secure data storage practices. However, no method of transmission or storage is 100% secure.

.Third-Party Service Providers

We engage trusted vendors (e.g., hosting, identity verification, analytics, email delivery) who process data on our behalf. They are bound by confidentiality and data protection obligations consistent with this policy.

.Cookies and Tracking Preferences

You can manage cookie preferences through your browser settings or via our cookie banner at first visit. Disabling essential cookies may impact core functionality of the Service.

.Changes To This Privacy Policy

We may update this policy periodically. Material changes will be posted and, where required, notified to you in-app or via email. Continued use of the Service after changes indicates acceptance of the revised policy.

. Contact Us

For any questions or concerns regarding your account or personal data, please reach out to us at: support@bidir.online