Privacy Policy

We collect personal information that you voluntarily provide to us when you engage our Services, submit inquiries through our contact forms, request a quotation, or communicate with us. This may include:

- Full name
- Email address
- Phone number
- Company or business name
- Physical or postal address
- Payment information (M-Pesa details, bank account information)
- Project-related content and materials you provide
- Any other information you choose to share with us

When you visit our Site, we may automatically collect certain technical information, including:

- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referral URL (the site that directed you to ours)
- Date and time of your visit
- General geographic location (based on IP address)

We use the personal information we collect for the following purposes:

- Service Delivery: To provide, manage, and deliver the Services you have engaged us for, including web development, software development, mobile app development, SEO, hosting, and related services.
- Communication: To respond to your inquiries, provide project updates, send invoices, and communicate about our Services.
- Payment Processing: To process payments via M-Pesa or bank transfer and maintain accurate financial records.
- Project Management: To manage project timelines, coordinate deliverables, and maintain project documentation.
- Website Improvement: To analyse how visitors use our Site and improve its functionality, content, and user experience.
- Marketing: With your consent, to send you information about our services, promotions, or industry news. You may opt out at any time.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes, including the Kenya Data Protection Act 2019.

In accordance with the Kenya Data Protection Act 2019, we process your personal data based on one or more of the following legal grounds:

- Consent: Where you have given us clear and informed consent to process your personal data for specific purposes, such as marketing communications.
- Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract (e.g., providing a quotation or delivering project work).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms (e.g., improving our services, website analytics).
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which Kedevelopers is subject (e.g., tax and financial reporting requirements).

Our Site uses cookies and similar tracking technologies to enhance your browsing experience. The technologies we use include:

- Essential Cookies: Required for the basic functionality of our Site, such as session management and security. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our Site by collecting information about pages visited, time spent, and navigation patterns. This data is aggregated and anonymised.
- Third-Party Widgets: Our Site uses Zoho SalesIQ, a live chat widget, which may set its own cookies to facilitate real-time communication with visitors. Zoho's use of cookies is subject to Zoho's own privacy policy.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site. Most browsers allow you to refuse or delete cookies. The methods for doing so vary by browser; please refer to your browser's help documentation for instructions.

Kedevelopers does not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

- Service Providers: We may share your data with trusted third-party service providers who assist us in delivering our Services, including web hosting providers, payment processors, domain registrars, and communication tools (such as Zoho SalesIQ). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
- Legal Requirements: We may disclose your information if required to do so by law, regulation, court order, or governmental request, or if we believe such disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
- With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

- Project Data: Client project data (including designs, code, and communications) is retained for the duration of the engagement and for a reasonable period thereafter to support warranty obligations and potential future collaboration.
- Financial Records: Payment and invoicing records are retained for the period required by Kenyan tax and financial regulations.
- Marketing Data: If you have opted in to receive marketing communications, your contact information is retained until you withdraw your consent or opt out.
- Website Analytics: Automatically collected data is retained in aggregated or anonymised form and is not linked to identifiable individuals.

When personal data is no longer needed, we will securely delete or anonymise it in accordance with our data retention procedures.

Kedevelopers implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

- Secure hosting environments with access controls
- Encrypted data transmission (SSL/TLS) on our Site
- Restricted access to personal data on a need-to-know basis
- Regular security reviews and updates

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours of becoming aware of the breach, as required by the Kenya Data Protection Act 2019. We will also notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Under the Kenya Data Protection Act 2019, you have the following rights regarding your personal data:

- Right of Access: You have the right to request confirmation of whether we hold your personal data and to obtain a copy of that data.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent.
- Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 7 days, as required by the Data Protection (General) Regulations, 2021.

Our Site and Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete that information as soon as possible. If you believe that we may have collected information from a child, please contact us immediately at [email protected].

Kedevelopers primarily stores and processes personal data on servers located in Kenya. However, some of our third-party service providers may process data outside of Kenya. In such cases, we ensure that appropriate safeguards are in place in compliance with the Kenya Data Protection Act 2019, including:

- Verifying that the recipient country provides adequate data protection
- Implementing appropriate contractual safeguards with the service provider
- Obtaining your explicit consent where required

We will not transfer your personal data to a country or international organisation that does not provide adequate data protection unless the appropriate safeguards have been put in place as required by the Kenya DPA.

Our Site may contain links to websites, applications, or services operated by third parties. This Privacy Policy applies only to information collected by Kedevelopers through our Site and Services. We are not responsible for the privacy practices, content, or security of any third-party websites or services.

We encourage you to review the privacy policies of any third-party sites you visit. Your interaction with any third-party website or service, including those linked from our Site, is subject to that third party's own terms and privacy policies.

Kedevelopers reserves the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting on our Site, and the "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. For active clients, material changes to this Policy will be communicated directly via email. Your continued use of our Site or Services after any changes to this Policy constitutes your acceptance of the updated terms.

This Privacy Policy is governed by the Data Protection Act, No. 24 of 2019 of the Republic of Kenya, and any subsidiary regulations issued thereunder. The processing of personal data by Kedevelopers is subject to the supervision of the Office of the Data Protection Commissioner (ODPC).

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the ODPC. You can contact the ODPC at:

Office of the Data Protection Commissioner
Nairobi, Kenya
Website: www.odpc.go.ke

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at:

Data Controller:
Kedevelopers Tech Limited
Nairobi, Kenya
Phone: 0710 244 777
Email: [email protected]
Website: www.kedevelopers.com