Cookie Policy

1.1Who we are

Papohapo Events & Experiences ("Papohapo", "we", "us") is an event planning platform and event services marketplace operated by Ericsoft Technologies, Old Namanga Road, Kitengela, Kajiado County, Kenya (P.O. Box 1211 - 00241).

1.2What this policy covers

This policy applies when you use www.papohapo.com and everything hosted on it, including:

• public pages, the event services marketplace, packages and service-provider profiles;
• event pages created in Event Page Studio, RSVP and registration forms, gift registries and tickets;
• organiser and service-provider dashboards, Event Plans, RFQs, quotations, agreements and payments;
• the Event Day Centre, seating planner and door check-in tools;
• sign-up, sign-in, contact, quote-request and support forms, the Help Centre and live chat.

1.3How it fits with our other policies

Cookies can involve personal data. How we handle personal data in general, your rights and how to exercise them are explained in our Privacy Policy. Your use of the platform is governed by our Terms & Conditions. If anything here conflicts with the Privacy Policy on how personal data is handled, the Privacy Policy prevails.

We apply this policy in line with Kenya's Data Protection Act, 2019 and its regulations. Where non-essential cookies are concerned, we rely on your consent.

2.1Cookies

A cookie is a small text file that a website places in your browser when you visit. It usually contains a name, a value and an expiry date. Each time you return, your browser sends the cookie back, so the site can recognise your browser and remember information such as your sign-in session or chosen language.

2.2Similar technologies

We also use technologies that work in a similar way:

• Local storage: data kept in your browser with no expiry date until you or the site removes it. We use it to remember display choices such as your preferred list view.
• Session storage: like local storage, but deleted when you close the browser tab. We use it to bring you back to the right place after saving a form.
• Scripts and tags: small pieces of code from services such as Google Analytics that may read or set cookies.

In this policy, "cookies" includes these similar technologies unless we say otherwise.

2.3What cookies cannot do

Cookies cannot run programs, carry viruses or read other files on your device. A cookie set by Papohapo can only be read by Papohapo, and a cookie set by a third party can only be read by that third party.

3.1The jobs cookies do on Papohapo

• Authentication: keep you signed in as you move between your dashboard, Event Plans, quotations and agreements.
• Security: protect forms and actions (for example signing an agreement or approving a payment) from forgery, and help detect suspicious activity.
• Session management: keep track of what you are doing across pages, such as a multi-step quote request or event creation wizard.
• Preferences: remember your language, time zone and how you like lists and Event Plan sections displayed.
• Analytics and performance (with your consent): count visits and see which pages and features are used, so we can fix problems and improve the platform.
• Support: keep your live chat conversation available as you move between pages.

3.2What we do not do

4.1Strictly necessary cookies

These make the platform work and keep it secure: signing in, keeping your session, protecting forms and remembering your cookie choice. They cannot be switched off in our preference centre because Papohapo would not work without them. Under the Data Protection Act, 2019, we use them because they are necessary to provide the service you request.

4.2Functional and preference cookies

These remember choices you make, such as your language and time zone, how you like lists displayed (Kanban, Tiles or List), and tips you have dismissed. They do not track you across other websites. Most are stored only in your browser. Because they are needed for features to behave as you expect, they are always active, but you can clear them in your browser at any time.

4.3Analytics and performance cookies

These help us understand how visitors use Papohapo, such as which pages are visited, how long pages take to load and where people get stuck, so we can improve the platform. We use Google Analytics for this, only if you accept analytics cookies. We also use Plausible Analytics, which counts visits in aggregate without any cookies.

4.4Marketing and advertising cookies

We do not currently use marketing or advertising cookies. The category is shown in our preference centre for transparency. It is switched off and cannot be switched on.

5.1First-party cookies

These are set by www.papohapo.com itself, such as the cookies that keep you signed in and remember your language. Papohapo runs on Odoo, a business software platform. Odoo's technology sets these cookies on our behalf, under our domain.

5.2Cookies set through third-party services

Some cookies are set by scripts from other providers. For example, when you accept analytics cookies, Google Analytics sets cookies named _ga on the papohapo.com domain. They are first-party cookies technically, but the information is processed by Google. Section 8 lists these services.

5.3Third-party sites you visit

If you follow a link from Papohapo to another site, such as a service provider's website, a payment page or a social network, that site may set its own cookies under its own policy. We do not control those cookies.

6.1Cookies

6.2Browser storage (local and session storage)

7.1Feature by feature

8.1Services that may use cookies or similar technologies

8.2Embedded content and social links

Social media buttons and links on Papohapo (for example Facebook, Instagram or WhatsApp sharing) are plain links: they do not set cookies until you click them and visit that service. If an event page embeds third-party content such as a video or map, the provider of that content may set cookies when it loads. Where third-party content is blocked until you accept non-essential cookies, you will see a placeholder.

9.1Session cookies

Session cookies (such as tz) and session storage are deleted when you close your browser or tab.

9.2Persistent cookies

Persistent cookies stay until their expiry date or until you delete them. On Papohapo these are: session_id (7 days, renewed while active), frontend_lang (1 year), website_cookies_bar (12 months) and, only with your consent, the Google Analytics cookies (up to about 13 months). Local storage items remain until you clear your browser data or the feature removes them.

10.1The cookie banner

On your first visit, a banner offers three options:

• Accept all: allows strictly necessary, functional and analytics cookies.
• Reject non-essential: allows only the cookies Papohapo needs to work. Analytics cookies are not set.
• Manage preferences: opens the preference centre on this page so you can choose.

Until you choose, analytics cookies are not set.

10.2Changing your mind

You can change or withdraw your consent at any time using the preference centre on this page or the "Cookie policy" link in the footer of every page. Withdrawing consent stops new analytics cookies being set and removes existing Google Analytics cookies from your browser. It does not affect processing that took place before you withdrew.

10.3How your choice is stored

Your choice is stored in the website_cookies_bar cookie on your device for 12 months. After that, or if you clear your cookies or use a different browser or device, we will ask again.

10.4Do Not Track and similar signals

Some browsers send "Do Not Track" or similar privacy signals. Because there is no common standard for how websites should respond, we rely on the choices you make in our banner and preference centre. Rejecting non-essential cookies has the same effect for analytics on Papohapo.

11.1Browser controls

Most browsers let you view, delete and block cookies, and clear local storage ("site data"). The official guides are:

11.2Google Analytics opt-out

You can also stop Google Analytics on all websites with Google's browser add-on.

12.1If you reject non-essential cookies

Everything on Papohapo keeps working normally. We simply do not use Google Analytics cookies for your visits.

12.2If you block or delete strictly necessary or functional cookies

If you clear your cookies, you will be signed out and we will ask for your cookie choices again.

13.1What we collect and why

Cookies may collect technical information such as an online identifier, your browser and device type, pages visited, time spent, referring site and approximate location derived from your IP address. We use it to provide and secure the platform, remember your preferences and, with your consent, produce aggregated statistics.

13.2Legal basis

• Strictly necessary and functional cookies: necessary to provide the service you request, and our legitimate interest in a secure, working platform.
• Analytics cookies: your consent, which you can withdraw at any time.

13.3Sharing, transfers and retention

• Google receives analytics data only if you consent. It processes the data under its own terms and may do so outside Kenya, with safeguards described in our Privacy Policy.
• Analytics reports we view are aggregated. We do not use cookie data to make decisions about you that have legal or similarly significant effects.
• Google Analytics data is kept for the retention period set in our Google Analytics account and then deleted. Other cookie data is kept for the durations listed in Section 6.
• We do not sell personal data, and we do not share cookie data for advertising.

13.4Your rights

You have rights over your personal data under the Data Protection Act, 2019, including access, correction, deletion and objection. Our Privacy Policy explains how to exercise them. You may also complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

14.1Children

Papohapo accounts are intended for people aged 18 and over. Guests of any age may view event pages or RSVP with an adult's involvement. We do not knowingly use cookies to build profiles of children. If you believe a child's data has been collected through cookies, contact us and we will delete it.

15.1Updates

• We review this policy when we add, remove or change cookies, services or features, and at least once a year.
• The "Last updated" date at the top shows when it last changed.
• If we add a new type of non-essential cookie, such as marketing cookies, we will ask for your consent before using it.

16.1Get in touch