Privacy notice

Last updated: 5 October 2026

Who we are

This notice explains how Krafitech Solutions, trading as Krafitech ("Krafitech", "we", "us"), of Nairobi, Kenya, collects and uses personal data through krafitech.co.ke. We are the data controller for this data under the Data Protection Act, 2019.

For any privacy question or request, email info@krafitech.co.ke.

What we collect

When you send an enquiry: your name, business name, phone number, email address, the service, package and add-ons you selected, your preferred way to be contacted, and anything you write in your message.

When you sign up for early access to one of our products: your work email, company name and, if you give it, your team size.

When you message us on WhatsApp, call or email: your number or address and what you send us.

When you browse the site: if you accept analytics cookies, which pages you visit, how you arrived and the type of device you use. If you do not accept them, we do not collect this.

We do not ask for sensitive personal data, and we ask you not to include it in your messages.

Why we use it

• To reply to your enquiry, prepare a quote and follow up on it.
• To contact you about early access and the launch of a product you signed up for.
• To keep a record of what was agreed if you become a client.
• To understand which pages help visitors and improve the site, only if you accepted analytics cookies.
• To protect our forms from spam and abuse.

We do not sell your data. We do not add you to a mailing list unless you ask to be added.

Our lawful basis

We rely on your consent, which you give when you tick the box on our forms, and you can withdraw it at any time. Where you become a client, we also process your data to perform our agreement with you and to meet our legal obligations, such as keeping financial records.

Who we share it with

We share your data only with service providers who help us run the site and reply to you, and only as much as they need:

We may also share data where the law requires it.

Transfers outside Kenya

Some of these providers store data on servers outside Kenya. When that happens, we make sure appropriate safeguards are in place to protect your data, as the Data Protection Act, 2019 requires.

How long we keep it

• Enquiries that do not lead to work: deleted 12 months after our last contact with you.
• Early access sign-ups: kept until the product launches, then for 12 months, unless you become a customer or ask us to delete them sooner.
• Client records: kept for as long as our agreement and the law require, including tax and accounting rules.
• Analytics data: kept for the period set in our analytics tool, no longer than 14 months.

Your rights

Under the Data Protection Act, 2019, you have the right to:

• be told how we use your data
• see the personal data we hold about you
• correct data that is wrong or incomplete
• have your data deleted
• object to or restrict how we use it
• withdraw your consent at any time

To use any of these rights, email info@krafitech.co.ke. We will respond within the time the law allows, and we may ask you to confirm your identity first.

If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.

Cookies

We use cookies that the site needs to work. We use analytics cookies only if you accept them in the cookie banner. You can change your choice at any time from the link in the footer.

Security

We keep your data on secure, access-controlled systems, use encrypted connections across the site, and limit access to the people who need it to reply to you.

Changes to this notice

We will update this page when our practices change and change the date at the top.