Privacy Policy

1. Introduction & data controller

This policy explains how Aldevor ("we", "us") collects, uses and protects personal data submitted through this website. The data controller is Aldevor, Kenyatta Avenue 118, Nakuru 20100, Kenya, reachable at [email protected]. We process personal data in accordance with Kenya's Data Protection Act, 2019, and the applicable guidance of the Office of the Data Protection Commissioner (ODPC).

2. What data we collect and how

We collect personal data you provide directly through the contact form on this site — your name, email address, optional phone number, and any message content. We also use cookies and similar local storage technologies to remember your consent choices and, where permitted, to understand site usage; see our Cookie Policy for full details.

3. Purposes and legal basis

4. Data sharing and third parties

We do not sell personal data. Data submitted through the contact form is used solely to respond to your enquiry and is not shared with third parties except where required by Kenyan law or to comply with a lawful request from a competent authority.

5. Retention

Contact form submissions are retained only as long as necessary to respond to your enquiry and maintain a reasonable record of correspondence, after which they are deleted or anonymised.

6. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, appropriate to the nature of the data we handle.

7. International transfers

This website operates entirely locally in your browser and does not transmit form data to any external server automatically; where data is transferred internationally as part of our correspondence with you, we take reasonable steps consistent with the Data Protection Act, 2019.

8. Your rights

Under the Data Protection Act, 2019, you have the right to access, correct, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled. To exercise any of these rights, please contact us via our contact page.

9. Opt-out & data deletion

Providing personal data through our contact form is entirely optional. You may disable cookies at any time through your browser settings or our cookie preferences panel. To request deletion of data you've previously submitted, please reach out via the contact page and we will action your request promptly.