Legal
Privacy Policy
Last updated: 13 July 2026
This site is run by Wycliffe Onduu, Nairobi, Kenya. I collect as little personal data as this site needs to work, and I don't sell it to anyone. This page explains what is collected, why, and what your rights are under the Kenya Data Protection Act, 2019.
What I collect
Contact form. Your name, email address, company (optional), a topic, and your message. This is delivered to my email inbox so I can reply. The form is protected by Google reCAPTCHA, which checks that you're human.
Chat widget. If you use the chat, you may be asked for your first name, email address, and phone number (optional), and the conversation itself is stored. If you share your email in chat, it may be added to my contact list so I can follow up.
Analytics. I use Google Analytics to understand how the site is used — pages visited, approximate location, device type. IP addresses are anonymized. This data is aggregated; I can't identify you from it.
Server logs. The site runs on Cloudflare, which keeps standard technical logs (IP address, request time) to serve and secure the site.
How I use it
To reply to your message, provide what you asked for, and — if you shared your details through the chat or asked to hear from me — send occasional emails you can unsubscribe from at any time. That's it. No selling data, no third-party advertising.
Who processes it
A small set of service providers handle data on my behalf: Cloudflare (hosting), Zoho ZeptoMail (email delivery), DM Champ (chat), VBOUT (email list), Google (analytics and reCAPTCHA), and Slack (internal notifications of new enquiries). Each processes only what its job requires.
How long I keep it
Enquiries and chat records are kept as long as they're useful for our conversation, then deleted. Mailing-list contacts are kept until you unsubscribe. Analytics data is retained on Google's standard schedule.
Your rights
Under the Kenya Data Protection Act, 2019, you can ask me what data I hold about you, ask me to correct it or delete it, object to how it's used, and withdraw consent at any time. Send me a message through the contact form and I'll act on it. You can also complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.
Contact
Questions about this policy or your data? Reach me through the contact form.
Changes
If this policy changes, the date at the top changes with it. No silent edits.
