Kenya's Data Protection Act 2019 regulates data controllers and processors and gives individuals enforceable privacy rights. VSL applies the applicable Kenyan data-protection requirements to the processing it performs, including role accountability, privacy notices, security safeguards, data-subject rights and cross-border data handling.

VSL records the purpose of collection, limits data to what the workflow needs, protects identity and payment information, and keeps public marketplace information separate from restricted KYC, payout, security and risk data.

For a Busha-supported Kenyan settlement flow, VSL transmits or records only the fields needed for that workflow, such as verified identity information, Kenyan contact or address information and the relevant M-Pesa recipient details. Busha's published documentation describes Kenyan individual verification using National ID and selfie evidence.

VSL does not treat a profile field or a prior verification performed elsewhere as automatic approval for a provider account or recipient. Provider references, outstanding requirements and returned status remain part of the transaction record.

Busha's published country documentation lists Kenya for supported KES payment and payout capabilities. VSL exposes a provider-backed route only when the account, recipient, KYC status, transaction purpose and provider eligibility support that route.

VSL preserves the user's configured payout or payment choice and the associated provider references. It does not silently substitute a different financial route simply because another provider connection exists.

Kenyan sellers are responsible for lawful goods and services, accurate descriptions and pricing, required licences or registrations, taxes, fulfilment and applicable consumer obligations. Buyers are responsible for lawful payment sources, accurate delivery information and compliance with import, age, permit or possession rules that apply to their purchase.