Privacy notice

SIVO Way ("SIVO", "we") helps travellers check visa rules, prepare visa applications and find flights and hotels. This notice explains what personal data we collect, why, who we share it with and the rights you have under the Kenya Data Protection Act, 2019.

1. Who is responsible for your data

SIVO Way, Nairobi, Kenya, is the data controller. Contact us about privacy at info@sivoway.co or +254 700 000 000.

2. What we collect

Account details: name, email, phone number and password (stored only as a one-way hash).
Visa application details: nationality, passport details, destination, travel dates and the documents you upload, such as passport copies, photos, bank statements and letters.
Payments: the M-Pesa phone number you pay from, the amount, the M-Pesa receipt number and the result. We never see or store your M-Pesa PIN or any card details.
Searches and partner visits: the flight and hotel searches you make and the partner links you open from SIVO.
Messages: what you send us through the contact form or support.
Technical data: IP address, browser type and security logs.

3. Why we use it and our legal basis

To provide the service you ask for (contract): preparing and tracking your visa application, taking payment, sending you status updates.
With your consent: handling the sensitive documents you upload, replying to contact messages and any optional analytics cookies. You can withdraw consent at any time.
To meet legal duties: tax and accounting records.
Legitimate interest: keeping the site secure, preventing fraud and keeping an audit record of who viewed your documents.

We use your data only for these purposes. We do not sell personal data.

4. Who we share it with

Embassies, consulates and official visa systems when you ask us to submit an application for you.
Safaricom M-Pesa to process your payment.
Flight and hotel booking partners: when you choose "Book now" you leave SIVO and continue on the partner's website. We pass the search details (route, dates, number of travellers), not your documents. The partner's own privacy notice applies on their site.
Service providers that host the website, send email and keep backups, under contracts that require them to protect your data.

Some of these recipients are outside Kenya. Where data leaves Kenya we rely on your consent or on appropriate safeguards as the Act requires.

5. How we protect it

Your documents are kept in private storage. They can be opened only through short-lived links after a permission check, and every time a staff member opens one it is written to an audit log that cannot be edited. Staff see only what their role needs. Connections to SIVO are encrypted.

6. How long we keep it

Visa application files and documents: up to 12 months after the application is completed, then deleted, unless you ask us to delete them sooner or the law requires longer.
Payment and receipt records: 7 years, as tax law requires.
Contact messages: 12 months.
Security and audit logs: 24 months.

7. Your rights

You have the right to be told how your data is used, to see it, to correct it, to object to or restrict its use, to receive a copy (portability) and to have it deleted. Write to info@sivoway.co and we will answer within the time the law sets. You can correct your name, email and phone yourself under My SIVO, Profile.

If you are not satisfied you may complain to the Office of the Data Protection Commissioner (ODPC), Kenya, at www.odpc.go.ke.

8. Cookies

Essential cookies (always on): keep you logged in, protect forms against misuse and remember your cookie choice. The light or dark theme is remembered in your browser.
Optional cookies (only if you choose "Accept all"): measure how the site is used so we can improve it. None are set before you agree.

Change your choice at any time with . The site loads its typeface from Google Fonts, which receives your IP address when the page loads.

9. Visa decisions

SIVO prepares and checks your file. The decision on any visa application is made only by the authorities of the destination country.

10. Changes to this notice

We will post any change on this page and update the date at the top. For important changes we will also tell registered customers by email.