Privacy Policy

Last updated: [DATE]. This is a template — please review it with a qualified advisor before publishing.

1. Who we are

This website is operated by [COMPANY NAME] (“we”, “us”, “our”), located at [PHYSICAL ADDRESS], Kenya. We are the data controller responsible for your personal information. If you have any questions about this policy, contact us at [PRIVACY EMAIL] or [PHONE NUMBER].

2. What information we collect

We only collect the information we need to help you:

• Information you give us — for example, when you fill in our contact form: your name, email address, phone number and the message you send.
• Information we collect automatically — basic technical details such as your device type and pages visited, collected through cookies and similar tools (see our Cookie Policy).

3. How we use your information

We use your information to respond to your enquiries, provide the services you ask for, improve our website, and meet our legal obligations. We do not sell your personal information to anyone.

4. Our legal basis

Under the Data Protection Act, 2019, we process your information based on your consent, our legitimate interest in running our business, and where necessary to perform a contract with you or comply with the law.

5. How long we keep it

We keep your information only for as long as we need it — for example, enquiry details are kept for [RETENTION PERIOD, e.g. 24 months] — and then securely delete it.

6. Who we share it with

We may share your information with trusted service providers who help us run our website and communicate with you (for example, our email and hosting providers). They may only use it to provide those services to us.

7. Your rights

Under the Data Protection Act, 2019, you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information (“right to be forgotten”).
• Object to, or ask us to limit, how we use your information.
• Withdraw your consent at any time.

8. How to exercise your rights

To exercise any of these rights, email us at [PRIVACY EMAIL]. We will respond within the time required by law.

9. Complaints

If you are not satisfied with how we handle your information, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, at www.odpc.go.ke.

10. Security

We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access.

11. Changes to this policy

We may update this policy from time to time. Any changes will appear on this page with a revised “last updated” date.

12. Contact us

[COMPANY NAME]
[PHYSICAL ADDRESS]
Email: [PRIVACY EMAIL]
Phone: [PHONE NUMBER]