Privacy Policy

1. Introduction

CloudSpinx Technologies Ltd ("CloudSpinx", "we", "us") is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019 and its associated regulations. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights as a data subject.

2. Who We Are

CloudSpinx Technologies Ltd is registered in Kenya. Our registered office is in Nairobi, Kenya. We are the data controller for personal data collected through this website and in the course of providing our services.

Data protection contact: [email protected]

3. Data We Collect

Information you give us

• Name, email address, phone number and company name when you complete a contact or enquiry form
• Communication history when you email or WhatsApp us
• Payment and billing information when you engage us for services

Information we collect automatically

• IP address and browser/device information
• Pages visited, time on site and referring URLs (via Google Analytics)
• Cookie data as described in our Cookie Policy below

4. How We Use Your Data

We use your personal data to:

• Respond to enquiries and provide the services you request
• Send you information about our services where you have consented or have a legitimate interest
• Improve our website and services through anonymised analytics
• Comply with our legal and regulatory obligations
• Prevent fraud and ensure the security of our systems

5. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract performance: To deliver services you have contracted us for
• Legitimate interests: To respond to enquiries and market our services to businesses likely to benefit from them
• Consent: For marketing communications where you have explicitly opted in
• Legal obligation: Where processing is required by Kenyan law

6. Data Sharing

We do not sell your personal data. We may share it with:

• Service providers: Cloud hosting providers (AWS), email services (Google Workspace), analytics (Google Analytics), and payment processors - all under appropriate data processing agreements
• Professional advisors: Lawyers and accountants under confidentiality obligations
• Authorities: Where required by Kenyan law or court order

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes above, and specifically:

• Enquiry data: 2 years from last contact
• Client data: 7 years from end of engagement (for tax/legal compliance)
• Marketing data: Until you unsubscribe

8. Your Rights

Under the Kenya Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any right, email [email protected]. We will respond within 21 days.

9. Cookies

We use essential cookies (required for the website to function) and analytical cookies (Google Analytics) to understand how visitors use our site. You can control non-essential cookies through your browser settings. We do not use advertising or tracking cookies.

10. Security

We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active clients of material changes by email. The "last updated" date at the top reflects the most recent revision.

12. Contact Us

For any privacy-related questions or requests:
Email: [email protected]
Post: CloudSpinx Technologies Ltd, Nairobi, Kenya