Privacy Policy for the EBX Connect Ecosystem
Our Commitment to Your Privacy
The EBX Connect Ecosystem (the "System"), managed by Kiira Motors Corporation ("we," "us," or "our"), is committed to safeguarding the privacy, confidentiality, and security of all taxpayers, business owners, and system users. This Privacy Policy explains how we collect, use, disclose, and protect your personal and financial information within our Integrated Revenue Management System.
1. Information We Collect
To facilitate seamless revenue administration, tax assessment, billing, and payment processing, the EBX Connect Ecosystem collects several categories of data.
A. Personal Identification Information
- For Individuals: Full name, National Identification Number (NIN) or equivalent government-issued ID, Tax Identification Number (TIN), physical address, email address, and phone number.
- For Businesses: Registered business name, trade license numbers, physical location/GIS data, ownership details, and employee payroll counts.
B. Financial and Transactional Data
- Income declarations, asset registers, property valuation records, and business turnover figures.
- Payment transaction history, bank account details for refunds or direct debits, mobile money numbers, transaction reference IDs, and outstanding tax or fee liabilities.
C. Technical and System Usage Data
- IP addresses, device type, operating system, system log files including login timestamps, page views, API calls, and audit trails of actions taken within the portal.
2. Legal Basis for Processing
We only process your personal data when we have a lawful basis to do so. Under applicable data protection laws, our processing is justified by:
- Public Mandate and Legal Obligation: To assess, collect, and audit public revenues, taxes, and municipal fees under applicable revenue, tax, local government, and data protection laws.
- Contractual Necessity: To perform transactions, issue permits, or manage service agreements that you actively request.
- Consent: Where you have explicitly opted into receiving notifications, updates, or alerts.
3. How We Use Your Information
The data collected within the EBX Connect Ecosystem is processed strictly for the following purposes:
- Assessment and Billing: Evaluating tax liabilities, issuing invoices, and sending payment reminders.
- Payment Processing: Interfacing with authorized banking institutions and mobile money operators to reconcile payments.
- Compliance and Fraud Detection: Detecting revenue leakages, identifying non-compliant entities, and auditing declared financial records.
- Communication: Sending system alerts, payment receipts, policy updates, and OTPs (One-Time Passwords) for secure login.
- System Optimization: Improving user interface workflows and analyzing system performance metrics.
4. Data Sharing and Disclosures
We do not sell your personal data. Your information is only shared with authorized third parties under strict confidentiality protocols:
- Financial Institutions: Partner banks and mobile network operators (MNOs) solely to verify and process payments.
- Government and Regulatory Bodies: Shared with national tax authorities, central banks, or law enforcement agencies only where legally mandated or authorized by law.
- Third-Party Service Providers: Cloud hosting services, SMS gateway providers, and IT maintenance contractors bound by strict non-disclosure agreements (NDAs) and security requirements.
5. Data Retention Policy
We retain your data only as long as necessary to fulfill the purposes for which it was collected, comply with legal or statutory audit requirements, or resolve disputes.
| Data Category | Retention Period | Disposal Method |
|---|---|---|
| Taxpayer Registration Records | Active duration of the tax profile plus 7 years after profile deactivation. | Secure digital archiving or permanent deletion. |
| Financial Transactions and Receipts | 10 years, or as dictated by national auditing standards. | Read-only encrypted archiving. |
| System Audit Logs and IPs | 2 years from creation date. | Automated system purge. |
| Customer Support Queries | 3 years post-resolution. | De-identification or anonymization. |
6. Security of Your Data
The EBX Connect Ecosystem employs robust administrative, technical, and physical security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
- Encryption: All data in transit is encrypted using Secure Sockets Layer/Transport Layer Security (SSL/TLS) protocols. Sensitive data at rest, such as passwords and payment tokens, is fully hashed and encrypted.
- Access Control: Strict Role-Based Access Control (RBAC) ensures that only authorized tax officers and personnel can view sensitive taxpayer information.
- Audit Trails: Every login, data modification, and export action is permanently logged in a tamper-proof audit trail.
- Multi-Factor Authentication (MFA): Available and highly recommended for all administrative and citizen accounts to secure portal access.
7. Your Data Privacy Rights
Depending on your jurisdiction, you have specific rights regarding your personal data. You may exercise these rights at any time:
- Right of Access: You can request a copy of the personal and financial information we hold about you.
- Right to Rectification: You can update or correct inaccurate or incomplete data directly through your EBX Connect dashboard.
- Right to Erasure ("Right to be Forgotten"): You can request deletion of non-statutory personal data. Please note that data held under legal tax-collection mandates cannot be erased upon request.
- Right to Object or Restrict Processing: You have the right to object to processing carried out under the basis of legitimate or public interest.
8. Cookies and Tracking Technologies
The EBX Connect portal uses functional cookies to remember your login sessions, language preferences, and system performance configurations. You can disable cookies in your web browser settings, though doing so may degrade some of the interactive functionality of the portal.
9. Updates to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect legislative changes, security updates, or system modifications. We will notify you of any material changes by posting the updated policy on our portal homepage and updating the "Effective Date" at the top of this page.
10. Contact Us
For questions about this Privacy Policy or how EBX Connect handles personal data, contact Kiira Motors Corporation.
Telephone: +256 39 3517888
Email: info@kiiramotors.com