1. What Information Do We Collect?
Personal information you disclose to us
In ShortWe collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. It may include:
- Names
- Email addresses
- Phone numbers
Sensitive Information. We do not process sensitive information.
All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such information.
Information automatically collected
In ShortSome information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting.
We also collect information through cookies and similar technologies — more in our Cookie Notice.
- Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, recorded in log files — IP address, device information, browser type and settings, activity within the Services, and device event information such as crash reports.
- Device Data. Information about the computer, phone, tablet, or other device you use to access the Services — IP address, device and application identification numbers, location, browser type, hardware model, ISP/mobile carrier, operating system, and system configuration.
- Location Data. Precise or imprecise information about your device's location, which may be derived from GPS or your IP address. You can opt out via your device's location settings, though some features may then be unavailable.
Google API
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Information collected from other sources
In ShortWe may collect limited data from public databases, marketing partners, and other outside sources.
To enhance our ability to provide relevant marketing, offers, and services, and to update our records, we may obtain information about you from public databases, joint marketing partners, affiliate programs, data providers, and other third parties — including mailing addresses, job titles, email addresses, phone numbers, intent data, IP addresses, social media profiles and URLs, and custom profiles, for targeted advertising and event promotion.
2. How Do We Process Your Information?
In ShortWe process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law — and for other purposes only with your prior explicit consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To respond to user inquiries / offer support. We may process your information to respond to your inquiries and resolve any issues with the requested service.
- To save or protect an individual's vital interest. We may process your information when necessary to protect an individual's vital interest, such as to prevent harm.
3. What Legal Bases Do We Rely On to Process Your Information?
In ShortWe only process your personal information when we believe it is necessary and have a valid legal basis under applicable law — such as consent, compliance with law, contractual necessity, or legitimate interests.
If you are located in the EU or UK
The GDPR and UK GDPR require us to explain the valid legal bases we rely on. We may rely on:
- Consent. We may process your information if you've given us permission for a specific purpose. You can withdraw consent at any time.
- Performance of a Contract. Where necessary to fulfill our contractual obligations to you, including providing our Services.
- Legal Obligations. Where necessary for compliance with our legal obligations, such as cooperating with law enforcement or a regulatory agency, or defending our legal rights.
- Vital Interests. Where necessary to protect your vital interests or those of a third party, such as situations involving potential threats to safety.
If you are located in Canada
We may process your information with your express or implied consent, which you can withdraw at any time. In some cases we may be legally permitted to process your information without consent, including:
- If collection is clearly in your interest and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions, provided certain conditions are met
- If contained in a witness statement necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we reasonably believe an individual has been, is, or may be a victim of financial abuse
- Where consent would compromise the availability or accuracy of information collected to investigate a breach of agreement or contravention of law
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of court
- If produced by an individual in the course of their employment, business, or profession, consistent with the purposes for which it was produced
- If collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and specified by regulation
- De-identified information disclosed for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
6. How Long Do We Keep Your Information?
In ShortWe keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless otherwise required by law.
We will only keep your personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer period is required or permitted by law (tax, accounting, or other legal requirements). No purpose in this notice requires keeping your personal information for longer than 6 months.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if that isn't possible (for example, information stored in backup archives), securely store and isolate it from further processing until deletion is possible.
7. How Do We Keep Your Information Safe?
In ShortWe aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect any personal information we process. However, no electronic transmission over the internet or information storage technology can be guaranteed 100% secure, so we cannot promise that hackers, cybercriminals, or other unauthorized parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk — please only access the Services within a secure environment.
8. Do We Collect Information From Minors?
In ShortWe do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.
By using the Services, you represent that you are at least 18 (or the equivalent age in your jurisdiction), or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at support@dimber.co.
9. What Are Your Privacy Rights?
In ShortDepending on your state of residence in the US or region — such as the EEA, UK, Switzerland, and Canada — you have rights that allow greater access to and control over your personal information.
In some regions you have the right to (i) request access and obtain a copy of your personal information, (ii) request rectification or erasure, (iii) restrict processing, (iv) request data portability, and (v) not be subject to automated decision-making. If an automated decision produces legal or similarly significant effects, we will inform you, explain the main factors, and offer a way to request human review. You may also have the right to object to processing. Contact us using the details in How Can You Contact Us About This Notice?
If you are in the EEA or UK and believe we are unlawfully processing your information, you have the right to complain to your Member State or UK data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent. Where we rely on your consent, you may withdraw it at any time by contacting us — this won't affect the lawfulness of processing before withdrawal.
Opting out of marketing. Unsubscribe anytime via the link in our marketing emails, or by contacting us. We may still send service-related messages necessary for your account or to respond to requests.
Cookies. Most browsers accept cookies by default; you can usually set yours to remove or reject them, though this may affect certain features. See our Cookie Notice.
Questions about your privacy rights? Email support@dimber.co.
10. Controls for Do-Not-Track Features
Most browsers and some mobile operating systems include a Do-Not-Track ("DNT") setting. As no uniform technology standard for recognizing DNT signals has been finalized, we do not currently respond to DNT signals or similar mechanisms. If a standard is adopted that we must follow, we'll update this notice accordingly. California law requires us to disclose this, and we do so here.
11. Do United States Residents Have Specific Privacy Rights?
In ShortIf you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, obtain a copy of, delete, or withdraw consent to our processing of your personal information.
Categories of personal information we collect
The table below reflects categories of personal information collected in the past twelve (12) months. For a full inventory, see What Information Do We Collect?
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, alias, postal address, phone number, unique/online identifier, IP address, email, account name | Yes |
| B. California Customer Records | Name, contact information, education, employment, employment history, financial information | No |
| C. Protected classifications | Gender, age, date of birth, race and ethnicity, national origin, marital status, other demographic data | Yes |
| D. Commercial information | Transaction information, purchase history, financial details, payment information | Yes |
| E. Biometric information | Fingerprints and voiceprints | Yes |
| F. Internet / network activity | Browsing history, search history, online behavior, interest data, interactions with our and other sites/apps | No |
| G. Geolocation data | Device location | Yes |
| H. Audio/electronic/sensory data | Images, audio, video, or call recordings created in connection with our business activities | No |
| I. Professional / employment | Business contact details, job title, work history, professional qualifications | No |
| J. Education information | Student records and directory information | No |
| K. Inferences | Inferences drawn to create a profile reflecting preferences and characteristics | No |
| L. Sensitive personal information | — | No |
We may also collect other personal information outside these categories where you interact with us in person, online, by phone, or by mail — for example through customer support, surveys or contests, and delivery of our Services.
We retain: Category A, C, D, E, and G information for as long as the user has an account with us.
Sources and use of personal information
See What Information Do We Collect? and How Do We Process Your Information? We collect and share your personal information through targeting/marketing cookies and beacons/pixels/tags.
We may disclose your personal information to our service providers under written contract — see When and With Whom Do We Share Personal Information? We may also use your personal information for our own business purposes, such as internal research for technological development; this is not considered "selling."
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Categories disclosed for a business or commercial purpose in that period are listed under When and With Whom Do We Share Personal Information?
Your rights
- Right to know whether we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of processing for targeted advertising, sale of personal data, or profiling with legal or similarly significant effects
Depending on your state, you may also have the right to: access categories of personal data processed (Minnesota); obtain a list of categories of third parties data was disclosed to (California, Delaware, Maryland); obtain a list of specific third parties (Minnesota, Oregon); obtain a list of third parties data was sold to (Connecticut); review, question, and correct profiling (Connecticut, Minnesota); limit use and disclosure of sensitive personal data (California); and opt out of collection via voice or facial recognition (Florida).
How to exercise your rights
Contact us via our data subject access request form, by emailing support@dimber.co, or via the contact details at the bottom of this page. We honor opt-out preferences signaled through the Global Privacy Control (GPC). Under certain state laws, you may designate an authorized agent to submit a request on your behalf; we may deny requests lacking valid proof of authorization.
Request verification & appeals
Upon receiving your request, we will verify your identity using only the information provided in the request, or by requesting additional information if needed for verification or fraud prevention. Requests submitted through an authorized agent require written, signed permission from you.
If we decline to act on your request, you may appeal by emailing support@dimber.co. We will inform you in writing of the outcome and reasoning; if your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" Law
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information we've disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. Submit such requests in writing using the contact details in How Can You Contact Us About This Notice?
12. Do Other Regions Have Specific Privacy Rights?
In ShortYou may have additional rights based on the country you reside in.
Australia and New Zealand
We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This notice satisfies the notice requirements of both Acts. If you decline to provide necessary personal information, it may affect our ability to offer you our Services or respond to your requests.
You may request access to or correction of your personal information at any time via How Can You Review, Update, or Delete the Data We Collect From You? If you believe we are unlawfully processing your information, you may complain to the Office of the Australian Information Commissioner or the Office of New Zealand's Privacy Commissioner.
Republic of South Africa
You may request access to or correction of your personal information at any time via How Can You Review, Update, or Delete the Data We Collect From You? If unsatisfied with how we've addressed a complaint, you can contact the Information Regulator (South Africa):
General enquiries: enquiries@inforegulator.org.za
Complaints (POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za
13. Do We Make Updates to This Notice?
In ShortYes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top. If we make material changes, we may notify you by prominently posting a notice or sending a direct notification. We encourage you to review this notice frequently.
14. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, email us at support@dimber.co or contact us by post:
DIMBERCrescent Court, Utawala
Nairobi, Nairobi 00521
Kenya
15. How Can You Review, Update, or Delete the Data We Collect From You?
Based on applicable laws of your country or US state of residence, you may have the right to request access to the personal information we collect from you, details on how we've processed it, correction of inaccuracies, or deletion. You may also withdraw your consent to our processing of your personal information. These rights may be limited by applicable law.
To request to review, update, or delete your personal information, please visit our data subject access request form.