Privacy policy

Who we are

This website is run by Afitech Solution Ltd, trading as AfiTech Solutions, a company registered in Kenya under number PVT-BEUXQ7GV. Our office is at Coffee Plaza, Mezzanine Floor, Room 5, Haile Selassie Avenue, Nairobi. We decide how the personal data collected through this website is used, so we are its data controller. You can reach us about privacy at info@afitech.co.ke or on +254 724 248 784.

What we collect

We collect only what you send us and what our web server needs to run safely:

• Enquiry details: your name, company, email address, phone number, the solution you are interested in and your message.
• Technical data: your IP address, browser type, the pages you request and the time of each request, recorded in our server logs.
• Anything you share when you call, email or message us on WhatsApp.

How we use it

We use your details to reply to your enquiry, prepare proposals and quotes, deliver and support the services you buy from us, keep the website secure and prevent abuse, and meet our legal obligations. We do not sell personal data, and we do not use it for automated decisions about you.

Our legal basis

Under section 30 of the Data Protection Act, we process enquiry details to take the steps you ask for before entering a contract, and to perform contracts with our clients. We process server logs for our legitimate interest in keeping the website secure. Where we rely on your consent, you can withdraw it at any time.

Cookies and tracking

This website sets no cookies and uses no analytics, advertising or social media trackers. Fonts and images are served from our own server, so visiting the site sends no data to third parties.

Who we share it with

We share personal data only with service providers who help us run our business, such as our web host and email provider, under contracts that require them to protect it, or when the law requires us to. Where a provider stores data outside Kenya, we make sure the transfer meets the requirements of the Act.

How long we keep it

If an enquiry does not lead to work together, we delete it within 24 months. Client records are kept for the length of the relationship and afterwards for as long as tax and company law requires. Server logs are kept for up to 90 days.

How we protect it

The website is served only over HTTPS. Access to enquiries and client data is limited to the people who need it, and our systems are kept up to date and backed up.

Your rights

Under the Data Protection Act, you have the right to:

• be told how your personal data is used;
• access the personal data we hold about you;
• object to the processing of all or part of it;
• have false or misleading data corrected;
• have false, misleading or unlawfully held data deleted;
• receive your data in a portable format, where this applies.

Making a request or a complaint

To use any of these rights, email info@afitech.co.ke with "Privacy request" in the subject. We may ask you to confirm your identity before we act. If you are unhappy with how we have handled your data, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last updated.