Privacy Policy

1. Who we are

This website is operated by Xclusivetech, a web design agency based in Nairobi, Kenya. Our registered business address is 1st Floor, Suite F8, Wood Ave, Park Apartments, Nairobi. You can contact us at hello@xclusivetech.co.ke or +254 722 753 819.

2. What personal data we collect

We collect personal data only when you voluntarily provide it. This includes:

• Your name, email address, and phone number when you submit our contact form
• Your name and phone number when you contact us via WhatsApp
• Your email address if you email us directly
• Basic usage data collected automatically via Google Analytics (anonymised IP addresses, pages visited, browser type)

We do not collect sensitive personal data (as defined in the Kenya Data Protection Act 2019).

3. Why we collect your data

We use your personal data to:

• Respond to your enquiries and provide you with a quotation
• Deliver and manage the web design services you request
• Send you project-related updates and communications
• Understand how visitors use our website so we can improve it

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

Under the Kenya Data Protection Act 2019 (KDPA), our legal bases for processing your personal data are:

• Consent — when you submit a contact form or send us a message
• Contract — when we need to process your data to deliver services you have engaged us for
• Legitimate interests — for website analytics to improve our services

5. How we share your data

We do not sell your personal data. We may share it with:

• FormSubmit.co — our contact form provider, which processes and forwards form submissions to our email address
• Google Analytics — for anonymised website analytics
• WhatsApp (Meta) — if you choose to contact us via WhatsApp

We do not transfer your personal data outside Kenya except as described above (FormSubmit.co and Google Analytics operate international servers). Where such transfers occur, we rely on the service providers' published data protection commitments.

6. How long we keep your data

We retain enquiry and client data for up to 3 years after our last interaction. You may request deletion at any time (see Section 8).

7. How we protect your data

Our website is served over HTTPS (TLS encryption). We store client information in access-controlled systems and do not store payment card data (payments are made via M-Pesa directly).

8. Your rights under the KDPA

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent at any time (without affecting any processing already completed)

To exercise any of these rights, email us at hello@xclusivetech.co.ke. We will respond within 30 days.

9. Cookies

We use Google Analytics, which sets cookies to collect anonymised usage data. You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact and complaints

For any privacy-related questions, contact us at hello@xclusivetech.co.ke. If you believe your data protection rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya at odpc.go.ke.