Access, correction, deletion and objections
Your data rights
How to make a personal-data request to Achla and what to expect from the process.
Last updated · 25 September 2026
Your rights
Subject to applicable law, you can ask to be informed about how your data is used, access personal data held about you, correct inaccurate or misleading information, object to some processing, and request deletion of inaccurate or misleading information. These rights reflect the protections in Kenya’s Data Protection Act.
How to make a request
Before launch, Achla will publish a monitored privacy contact and a request form. Your request should say what you need: access, correction, deletion, objection, or a question about use. Include the email address connected to your Achla account and enough detail for us to find the relevant record.
Verification and response
We may ask for proportionate information to confirm that the request comes from the right person. Do not email passport images, selfies, card information or bank-account numbers unless a secure, requested channel has been provided. We will respond within the timeframe required by applicable law and explain if we cannot fulfil part of a request.
Limits
Deleting an account does not always remove every record immediately. We may keep limited information where necessary for completed transactions, legal obligations, fraud prevention, security, disputes or enforcement of our terms. We will not use retained data for unrelated marketing.
Escalating a concern
If you have a concern about our handling of personal data, contact Achla first once the privacy contact is published. You may also raise a complaint with the Office of the Data Protection Commissioner in Kenya. Its current guidance on data-subject rights is available on its public website.