Privacy Policy

01 Information We Collect

1.1 Information You Provide Directly

When you register for an account, purchase a service, or contact us, we collect:

• Full name and contact details (email address, phone number)
• Billing information (physical address, payment method details)
• Company or business name
• Communications you send us (support tickets, emails, chat messages)
• Quote request details submitted through our contact forms

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and screen resolution
• Server log data related to your requests

1.3 Information from Third Parties

We may receive information about you from payment processors (M-Pesa, Visa, Mastercard), domain registries, and fraud-prevention partners when you transact with us.

02 How We Use Your Information

We use your personal data to:

• Provision and manage the hosting services you purchase
• Process payments and send invoices and receipts
• Respond to your support requests and enquiries
• Send transactional emails (account notices, renewal reminders, downtime alerts)
• Detect and prevent fraud, abuse, and security threats
• Comply with legal and regulatory obligations under Kenyan law
• Improve our website, services, and customer experience
• Send marketing communications (only with your consent, which you can withdraw at any time)

03 Information Sharing & Disclosure

We share your information only in the following limited circumstances:

• Service Providers: We share data with vetted processors (e.g., payment gateways, email delivery, analytics) who are contractually bound to use it only on our behalf.
• Legal Requirements: We may disclose data if required by Kenyan law, court order, or to protect the rights, property, or safety of KDC, our customers, or the public.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred to the successor entity, with prior notice to you.
• With Your Consent: Any other sharing will be only with your explicit consent.

04 Data Storage & Security

Your data is stored on our servers located at Nextgen Mall, Mombasa Road, Nairobi, Kenya. We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Multi-factor authentication for staff access to systems
• Regular penetration testing and vulnerability assessments
• 24/7 physical security with CCTV and biometric access controls
• Automated daily backups with off-site redundancy

05 Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Essential cookies: Enable core functionality such as login sessions and shopping cart state.
• Analytics cookies: Understand how visitors use our site (e.g., Google Analytics with IP anonymisation).
• Preference cookies: Remember your settings such as currency and language.

You can control cookies through your browser settings. Disabling essential cookies may impair some site functionality.

06 Your Rights & Choices

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete information
• Erasure ("right to be forgotten") of your data where legally permissible
• Restrict or object to certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent for marketing at any time
• Lodge a complaint with the Office of the Data Protection Commissioner of Kenya

To exercise any of these rights, email us at info@kenyadatacentre.com. We will respond within 30 days.

07 Data Retention

We retain your personal data only as long as necessary:

• Active account data: retained for the life of your account plus 7 years (for tax and audit compliance)
• Support tickets and communication logs: 3 years
• Website analytics data: 26 months (anonymised after 14 months)
• Marketing consent records: until you withdraw consent, then 1 year

Upon expiry of these periods, data is securely deleted or irreversibly anonymised.

08 Third-Party Services

Our website and services may contain links to or integrations with third-party services, including:

• M-Pesa / Safaricom (payment processing)
• Google Analytics (website analytics)
• Cloudflare (DDoS protection and CDN)
• cPanel / WHM (hosting control panel)

These third parties have their own privacy policies. We encourage you to review them. KDC is not responsible for the privacy practices of third-party services.

09 Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal information without parental consent, we will take steps to delete that information promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notice to your registered email address
• Display a prominent notice on our website for 30 days

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

11 Contact Us

For any privacy-related questions, data access requests, or complaints, please contact our Data Protection Officer: