Effective Date: 28 June 2026 Last Updated: 28 June 2026

1. Introduction

Welcome to Paybills.co.ke (“we”, “our”, or “us”). We operate the website https://paybills.co.ke, a free public directory of verified M-PESA paybill numbers for organisations in Kenya, covering utilities, education, healthcare, government services, financial institutions, insurance, entertainment, and more.

This Privacy Policy explains what information we collect when you visit our website, how we use it, how we protect it, and your rights in relation to that information. It applies to all visitors and users of Paybills.co.ke.

By using our website, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the site.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily submit through the Contact form on our website. This may include:

Your name
Your email address
The subject of your enquiry
Any message content you include in your submission

2.2 Information Collected Automatically

When you visit Paybills.co.ke, certain technical information is collected automatically by our servers and third-party analytics services. This includes:

Your IP address
Browser type and version
Operating system
Referring website or URL
Pages visited and time spent on each page
Date and time of your visit
Search queries entered on the site

This data is collected in aggregate and is generally not used to identify you as an individual.

2.3 Cookies and Similar Technologies

Our website uses cookies — small text files placed on your device — to enhance your experience, analyse traffic, and understand how visitors interact with our content. The types of cookies we use include:

Strictly Necessary Cookies: Required for the website to function correctly (e.g. security, session management).
Analytics Cookies: Used to collect anonymised information about how visitors use the site. We use Google Analytics for this purpose.
Preference Cookies: Used to remember settings such as language or display preferences.

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to enquiries submitted through our Contact form
To improve and maintain the content, accuracy, and usability of the site
To monitor and analyse website traffic and user behaviour in order to optimise our service
To detect, prevent, and address technical issues, security threats, or fraudulent activity
To comply with applicable legal obligations under Kenyan law
To send administrative communications if you have contacted us — we do not send unsolicited marketing emails

4. Third-Party Services and Data Processors

We use a number of trusted third-party services in connection with the operation of Paybills.co.ke. These services may receive or process certain user data on our behalf.

4.1 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects anonymised data including page views, session duration, and traffic sources. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

4.2 WordPress and Hosting

Our website is built on WordPress and hosted on shared hosting infrastructure. Our hosting provider processes server logs and technical data necessary to operate the website.

4.3 Contact Form

Messages submitted through our Contact form are processed and stored within our WordPress installation. We do not use third-party CRM tools to store contact enquiries.

4.4 Safaricom / M-PESA Disclaimer

Paybills.co.ke is an independent information directory. We are not affiliated with, endorsed by, or a partner of Safaricom PLC or the M-PESA service. We do not process, facilitate, or receive any M-PESA payments, and we do not collect any financial credentials or M-PESA PINs. Any payments made via M-PESA are conducted directly between you and the relevant organisation through Safaricom’s platform.

5. Legal Basis for Processing

Kenya’s Data Protection Act, 2019 governs our collection and processing of personal data. Our legal bases for processing include:

Consent: Where you have provided explicit consent, for example by submitting a contact form.
Legitimate Interests: For analytics, security monitoring, and improving our service, where our interests do not override your rights.
Legal Obligation: Where we are required to process or retain data to comply with applicable law.

We do not process sensitive personal data such as health information, biometric data, or financial account details through this website.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

Service Providers: Trusted providers (such as our hosting provider and analytics platform) who assist in operating the website, subject to confidentiality obligations.
Legal Requirements: Where required to comply with a legal obligation, court order, or request from a competent regulatory authority in Kenya.
Business Transfer: In the event that Paybills.co.ke is sold or its assets transferred, user data may form part of those assets. You will be notified in advance.
Protection of Rights: Where necessary to protect the rights, property, or safety of Paybills.co.ke, our users, or the public.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact form submissions are retained for up to 12 months from the date of submission, or until the enquiry is resolved, whichever is earlier.
Server logs and analytics data are retained for up to 26 months.
Cookie data persists according to individual cookie durations — from session-end for session cookies to up to 24 months for persistent analytics cookies.

Upon expiry of the retention period, data is securely deleted or anonymised.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit (HTTPS)
Access controls restricting administrative access to the website backend
Regular monitoring of our hosting environment for security vulnerabilities
Use of up-to-date WordPress software and plugins

No method of transmission over the internet is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

9. Your Rights Under the Data Protection Act, 2019

As a data subject under the Kenya Data Protection Act, 2019, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations.
Right to Object: Object to our processing of your personal data in certain circumstances.
Right to Data Portability: Request your data in a structured, machine-readable format where technically feasible.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 21 days as required under the DPA 2019.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.

10. Children’s Privacy

Paybills.co.ke is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will delete that information promptly.

11. Links to Third-Party Websites

Our website contains links to external websites, including organisations whose paybill numbers are listed in our directory. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party website you visit.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Website: https://paybills.co.ke Contact Page: https://paybills.co.ke/contact/

We are based in Kenya and operate under the laws of the Republic of Kenya, including the Data Protection Act, 2019 and the Kenya Information and Communications Act.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this document. Continued use of Paybills.co.ke after any changes constitutes your acceptance of the updated policy.