| Book. Bill. Sell. Protect Trust.
Who we are
Kalenda ("we", "us", "the Platform") provides calendar, booking, commerce, billing, and client management tools for private-practice professionals.
Kalenda is operated and published by The Business Clinic Limited, which is the data controller for platform account data, billing to practitioners, security logs, and platform communications. BizClinic Africa LLC provides technology and shared services supporting the Platform.
Data Protection Officer contact: privacy@bizclinic.africa · WhatsApp +254113132508.
General support: support@bizclinic.africa.
Controller and processor roles
- The Business Clinic Limited (operating Kalenda) acts as data controller for platform account data, billing to practitioners, security logs, and platform communications.
- Practitioners act as data controllers for their client records, bookings, invoices, and practice-specific communications.
- Kalenda acts as data processor when handling client data on behalf of practitioners through booking, checkout, and practice management features.
Data we collect
- Practitioner data: name, email, phone, profession, business details, payment settings, calendar preferences.
- Client data: name, email, phone, billing address, booking details, intake responses, payment status.
- Transaction data: invoices, payments, wallet entries, tax/eTIMS metadata (where enabled).
- Technical data: IP address, device/browser type, session cookies, audit logs, security events.
- Marketing data: campaign attribution, optional marketing consent records.
Sources of data
Data is collected directly from practitioners and clients, from integrations you connect (payment providers, email/SMS, calendar sync, eTIMS, social platforms), and from automated platform processes (reminders, receipts, audit logs).
Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Provide booking and commerce services | Contract |
| Account security and fraud prevention | Legitimate interests / Legal obligation |
| Platform billing and subscriptions | Contract |
| Optional marketing communications | Consent |
| Compliance, tax, and audit records | Legal obligation |
| Analytics (where consented) | Consent |
Sensitive data
Some practitioners may process sensitive professional or health-related information. Practitioners must collect only what is necessary, obtain appropriate consent where required, and configure intake forms responsibly. Kalenda provides classification and access controls but does not provide medical, legal, or financial advice.
Cookies and analytics
We use necessary cookies for sessions, security, and cart functionality. Analytics and marketing cookies require your opt-in consent. See our Cookie Policy.
Payments and billing
Payment card data is processed by certified payment providers (e.g. Stripe, M-PAY). Kalenda does not store full card numbers. Billing records are retained as required for accounting, tax, and dispute resolution.
Integrations and subprocessors
When you connect integrations, data may be shared with third-party providers listed in our Subprocessor Register. Practitioners are responsible for informing clients where required.
International transfers
Data may be processed in Kenya and other jurisdictions where our hosting and subprocessors operate. We apply appropriate safeguards including contractual protections where required.
Retention
We retain data according to our retention schedule and practitioner-configured settings within allowed limits. Legal, tax, and fraud-prevention records may be retained longer where required by law.
Security
We implement encryption, access controls, tenant isolation, audit logging, and secure session management aligned with industry standards. No system is perfectly secure; report concerns to support@bizclinic.africa.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, and request portability. Kenya residents may lodge complaints with the Office of the Data Protection Commissioner (ODPC). EU/UK residents have rights under GDPR/UK GDPR.
Submit requests via the Privacy Center or email support@bizclinic.africa.
Children
Kalenda is not intended for users under 18 without appropriate guardian involvement.
Breach notification
We will notify affected users and regulators where required by applicable law.
Changes
We may update this policy. Material changes will be communicated with a new version number. Continued use after notice constitutes acceptance where permitted by law.