Privacy Policy

Definitions:

DPA: The Kenya Data Protection Act, 2019.

Data Controller: A natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purpose and means of processing personal data.

Data Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller.

Data Subject: An identified or identifiable natural person who is the subject of personal data.

1. Principles for Processing Personal Data

In accordance with the Kenya Data Protection Act, 2019, our principles for processing personal data include:

• Lawfulness, fairness, and transparency: Data is processed lawfully, fairly, and in a transparent manner in relation to the data subject.
• Purpose limitation: Data is collected for explicit, specified, and legitimate purposes.
• Data minimization: Data collection is adequate, relevant, and limited to what is necessary.
• Accuracy: Personal data is accurate and kept up to date.

2. What Personal Data We Collect and Process

We collect various types of personal data to effectively deliver our services, including:

• Email address
• First name and last name
• Phone number
• Company name (for business clients)
• Address, County, City, ZIP/Postal code

3. How We Use the Personal Data

Olunga Tech Creations uses the collected personal data for:

• Providing web design, AI automations, development, and management services
• Notifying you about changes to our services and/or products
• Providing customer support and professional trainings
• Improving our services and business operations
• Detecting, preventing, and addressing technical issues

4. Legal Basis for Collecting and Processing Personal Data

We process your personal data under the following legal bases recognized by the DPA:

• Consent: You have given explicit consent for processing for one or more specific purposes.
• Performance of a contract: Processing is necessary for a contract we have with you.
• Legitimate interests: Processing is necessary for the legitimate interests pursued by Olunga Tech Creations.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

5. Retention of Personal Data

Olunga Tech Creations retains personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, complying with our legal obligations in Kenya, resolving disputes, and enforcing our agreements.

6. Your Data Protection Rights

Under Section 26 of the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right to be informed: To be informed of the use to which your personal data is to be put.
• Right to access: To access your personal data in our custody.
• Right to object: To object to the processing of all or part of your personal data.
• Right to correction: To request correction of false or misleading data about you.
• Right to deletion: To request deletion of false or misleading data about you.
• Right to data portability: To receive your data in a structured, commonly used, and machine-readable format.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at info@olunga.tech.