HubCart Data Deletion Policy

Company: HubCart Ltd.

Registration No.: PVT-KW1995BD

Website: www.hub-cart.com

Contact Email: support@hub-cart.com

Last Updated: 18 May 2026

Overview

HubCart Ltd. respects your right to control your personal data. This policy explains how you can request deletion of your account and personal data, what data will be deleted, what data must be retained by law, and the timeline for deletion.

This policy applies to all users of the HubCart mobile application and web platform — customers, suppliers, eateries, drivers, riders, and employers.

How to Request Data Deletion

You can request deletion of your account and data in any of the following ways:

Option 1 — In-App (Recommended)

Open the HubCart app.
Go to Profile → Settings → Account.
Tap Delete My Account.
Confirm your identity with your password or OTP.
Submit the request.

Option 2 — Email Request

Send an email to support@hub-cart.com with:

Subject line: "Account Deletion Request"
Your full name and registered phone number.
A brief statement that you wish to delete your account and all associated data.

We will acknowledge your request within 3 business days and complete the deletion within 30 days.

What Gets Deleted

Upon a verified deletion request, the following data is permanently deleted:

Data Category	Deleted
Name, email, phone number	✅ Yes
Profile photo	✅ Yes
National ID number	✅ Yes (after retention period — see below)
Uploaded KYC documents	✅ Yes
Location history	✅ Yes
Device information	✅ Yes
Product listings and menus	✅ Yes
Vehicle records	✅ Yes
Job postings and applications	✅ Yes
In-app messages (helpdesk)	✅ Yes
Account preferences and settings	✅ Yes

What Is Retained and Why

Certain data cannot be immediately deleted due to legal obligations under Kenyan law. This data is retained for the minimum legally required period and then deleted.

Data Category	Retention Period	Legal Basis
Financial transaction records (M-Pesa payments, invoices, receipts)	7 years	Kenya Tax Procedures Act, 2015
KYC identity records (for verified accounts that processed payments)	7 years	Central Bank of Kenya Anti-Money Laundering regulations
Dispute and fraud investigation records	7 years	Kenya Data Protection Act 2019, legitimate interests
Audit logs of admin actions affecting your account	3 years	Legitimate interests / platform security

After the retention period expires, this data is permanently and irreversibly deleted.

Anonymisation

Where full deletion is not immediately possible due to the retention periods above, your personally identifiable information (PII) is anonymised within 30 days of your deletion request. This means:

Your name is replaced with an anonymised identifier.
Your phone number and email address are removed.
Your National ID number is retained for the 7-year period stated in the table above (Central Bank of Kenya anti-money-laundering requirement) and is permanently deleted once that period expires.
Transaction records are retained only with anonymised user references (no name or contact details).

This approach ensures your financial history cannot be traced back to you while still meeting our legal obligations.

Effect of Deletion

Once your account is deleted or anonymised:

You will no longer be able to log in.
All active orders or rides must be completed or cancelled before deletion is processed.
Any pending earnings will be paid out to your registered M-Pesa number before the account is closed.
You will not receive further notifications or marketing communications.
Ratings and reviews you gave or received will be anonymised.

Reactivation

Deleted accounts cannot be reactivated. If you wish to use HubCart again after deletion, you must create a new account and complete KYC verification again.

Contact

For questions about this policy or to submit a deletion request:

HubCart Ltd.

Email: support@hub-cart.com

Website: www.hub-cart.com

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.