Privacy Policy

1. Data Controller Information

2. Information We Collect

2.1 Personal Information You Provide

When you use our services or contact us, we may collect:

• Contact Information: Name, email address, phone number, company name
• Business Information: Industry type, company size, business requirements
• Service Inquiries: Details about your IT needs, export/import requirements, product specifications
• Communication Records: Messages, emails, and call logs when you contact us
• Financial Information: Budget ranges and payment information (when engaging our services)

2.2 Automatically Collected Information

• Technical Data: IP address, browser type, device information, operating system
• Website Analytics: Pages visited, time spent, click patterns (via Google Analytics)
• Performance Data: Website loading times and user experience metrics
• Cookies: Session cookies for website functionality and analytics cookies for optimization

3. Legal Basis for Processing (Under Kenyan DPA)

We process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through our contact forms
• Legitimate Interest: For business development, service improvement, and customer support
• Contract Performance: To fulfill services you have requested or contracted
• Legal Obligation: To comply with Kenyan tax, regulatory, and business registration requirements

4. How We Use Your Information

4.1 Primary Uses

• Respond to your inquiries and provide requested services
• Deliver IT solutions, export/import services, and product sourcing
• Process and manage your orders and transactions
• Provide customer support and technical assistance
• Send service updates and important business communications

4.2 Secondary Uses

• Improve our website performance and user experience
• Analyze business trends and market opportunities
• Develop new services and enhance existing offerings
• Ensure website security and prevent fraud
• Comply with legal and regulatory requirements

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your data with trusted service providers who assist us in:

• Email Services: For sending communications and confirmations
• Analytics: Google Analytics for website performance monitoring
• Cloud Hosting: Secure data storage and website hosting services
• Payment Processing: Secure payment gateways for transactions
• Business Partners: Qualified suppliers and vendors for fulfilling your requests

5.2 Legal Disclosures

We may disclose your information when required by:

• Kenyan courts or government authorities
• Legal proceedings or regulatory investigations
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

6. Data Storage and Security

6.1 Storage Locations

• Primary Storage: Secure servers within Kenya or approved data centers
• Backup Storage: Encrypted cloud storage with international providers (with adequate safeguards)
• Local Copies: Essential business records maintained in Kenya as required by law

6.2 Security Measures

• SSL encryption for all data transmission
• Regular security audits and updates
• Access controls and user authentication
• Employee training on data protection
• Incident response and breach notification procedures

7. Data Retention

8. Your Rights Under Kenyan Data Protection Act

As a data subject, you have the following rights:

9. Cookies and Tracking

9.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Google Analytics for website performance monitoring
• Performance Cookies: Help us improve website speed and user experience
• Preference Cookies: Remember your settings and preferences

9.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.

10. International Data Transfers

When we transfer data outside Kenya, we ensure:

• Adequate level of protection as determined by the Data Commissioner
• Appropriate safeguards such as contractual clauses
• Your explicit consent where required
• Compliance with cross-border transfer requirements under Kenyan DPA

11. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Office of the Data Protection Commissioner within 72 hours
• Inform affected individuals without undue delay
• Provide details of the breach and remedial actions taken
• Implement measures to prevent future incidents

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in:

• Our business practices or services
• Legal or regulatory requirements
• Technology or security measures
• Industry best practices

We will notify you of significant changes through our website or email communications.

14. Contact Information