Last updated: September 3, 2026
1.1 Mosmos is a product operated by ASENATECH LIMITED ("Asenatech", "Mosmos", "we", "us" or "our").
1.2 We are committed to protecting your privacy and processing your personal data lawfully, fairly and transparently.
1.3 This Privacy Policy explains how we collect, use, store, share and protect personal data when you use Mosmos, including our website, mobile applications, Mosmos Discover, Mosmos Merchant and related services.
1.4 For purposes of applicable data protection law, Asenatech acts as a data controller in respect of personal data for which it determines the purposes and means of processing. In certain circumstances, we may also process personal data on behalf of another party.
Depending on how you interact with Mosmos, we may collect and process the following categories of personal data:
This may include your:
This may include:
When you create or participate in a Booking, we may process information including:
We may process information relating to payments made through or in connection with Mosmos, including:
Where payments are processed by third-party payment service providers, payment credentials may be collected and processed directly by those providers in accordance with their respective privacy policies.
Where you use Mosmos on behalf of a Partner Merchant or other business, we may process:
We may process communications between you and Mosmos, including customer support enquiries, complaints, feedback and other correspondence.
When you access our website, applications or other digital services, we may automatically collect certain technical information, including:
We may collect personal data:
Where we receive personal data from another source, we will process it in accordance with applicable data protection law and this Privacy Policy.
We process personal data only where we have a lawful basis for doing so.
We may process your personal data to:
Where necessary to provide a service you have requested, the legal basis for this processing is the performance of our contract with you or taking steps at your request before entering into a contract.
We may process personal data to onboard and manage Partner Merchants, administer merchant accounts, facilitate Bookings, reconcile transactions and manage our commercial relationships.
We may use your contact information to send communications relating to your account, Bookings, payments, purchases, security, service changes and other important operational matters.
Where permitted by law, we may send you information about products, Partner Merchant offers, Mosmos Discover promotions and other Mosmos services that may be relevant to you.
Where your consent is required, we will obtain it before sending such communications.
You may opt out of marketing communications at any time using the unsubscribe or opt-out method provided or by contacting us.
Opting out of marketing communications will not prevent us from sending essential communications relating to your account, Bookings or transactions.
We may process personal data where reasonably necessary to:
We may process and retain personal data where necessary to comply with applicable laws, regulations, lawful requests, court orders or regulatory requirements.
We may use information about how customers interact with Mosmos to understand service usage, troubleshoot problems, improve our products and services and develop new functionality.
Where reasonably possible, we may aggregate or anonymise information used for analytics and business intelligence.
We do not sell your personal data.
We may disclose personal data where reasonably necessary for the operation of Mosmos, including to the following categories of recipients.
Where you create a Booking for a product or service supplied by a Partner Merchant, we may share information necessary for that merchant to identify, administer, reserve, fulfil or otherwise manage the relevant purchase.
We may share or receive transaction information from payment service providers, banks and other financial service providers where necessary to process, reconcile or verify payments.
We may engage service providers that support the operation of Mosmos, including providers of:
Such providers may process personal data only to the extent necessary to provide their services and subject to applicable data protection requirements.
We may disclose personal data to professional advisers including auditors, accountants, lawyers and consultants where reasonably necessary.
We may disclose personal data where required or permitted by law, including to courts, regulators, law enforcement agencies and other competent authorities.
If Asenatech or part of its business is involved in a merger, acquisition, restructuring, investment, sale or similar corporate transaction, personal data may be disclosed to relevant parties subject to appropriate confidentiality and data protection safeguards.
Partner Merchants participating in Mosmos may receive personal data necessary to administer and fulfil customer purchases.
A Partner Merchant may independently process personal data for purposes relating to its own business, such as product fulfilment, warranties, delivery and customer service.
Where a Partner Merchant independently determines how and why it processes personal data, its processing may also be governed by its own privacy policy.
Mosmos only shares information with Partner Merchants to the extent reasonably necessary for the relevant purpose.
Payments made in connection with Mosmos may involve banks, mobile money providers, payment service providers and other financial institutions.
We may receive transaction references, amounts, payment status and other information necessary to identify and reconcile your payments.
Where payment credentials or other financial information are collected directly by a payment provider, that provider's processing of such information is governed by its own terms and privacy practices.
Our website and digital services may use cookies and similar technologies to operate our services, remember preferences, understand how customers use Mosmos and improve the customer experience.
Cookies may also be used for analytics and other functions where permitted by law.
You may configure your browser to reject or restrict cookies. However, disabling certain cookies may affect the functionality of our website or services.
Some of our technology or service providers may process or store personal data outside Kenya.
Where personal data is transferred outside Kenya, we will take reasonable steps to ensure that the transfer is made in accordance with applicable data protection law and that appropriate safeguards are in place.
Where required by law, we will obtain consent or implement other legally recognised safeguards before transferring personal data outside Kenya.
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.
These measures may include access controls, authentication, system monitoring, secure infrastructure and restrictions on access to personal data based on operational requirements.
While we take reasonable measures to protect personal data, no electronic system or method of transmission can be guaranteed to be completely secure.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by law.
The applicable retention period may depend on:
When personal data is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with our data retention procedures.
Subject to applicable law, you may have the right to:
Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.
Some rights may be subject to legal limitations. For example, we may be required to retain certain transaction or business records even after you request deletion of your account.
To exercise your rights, contact us using the details provided in Section 16.
We may request reasonable information to verify your identity before acting on a request.
You may request deletion of your personal data or Mosmos account by contacting us at support@mosmos.africa.
Where a valid deletion request is received, we will delete, anonymise or restrict the relevant personal data as appropriate, unless continued retention is necessary or permitted for purposes including:
Information may remain temporarily in secure backup systems until overwritten or deleted in accordance with our backup and retention procedures.
Mosmos is not intended for use by persons who do not have legal capacity to enter into the applicable transaction without the involvement or authorisation of a parent, guardian or other legally authorised person.
Where we knowingly process personal data relating to a child, we will do so in accordance with applicable data protection law, including applicable requirements relating to parental or guardian consent.
If you have concerns about how we process your personal data, please contact us first so that we can investigate and address your concern.
You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC) in accordance with applicable law.
For questions, requests or complaints relating to this Privacy Policy or the processing of your personal data, contact:
ASENATECH LIMITED
Operator of Mosmos
Email: support@mosmos.africa
We may update this Privacy Policy from time to time to reflect changes to our services, business practices or legal and regulatory requirements.
Where we make material changes, we may notify you through the Mosmos platform, by email, SMS or through another appropriate communication channel.
The latest version of this Privacy Policy will be published on our website together with its effective or last updated date.
↑ Back to top