1) What Data We Collect
We collect only what we need to run and improve our site and services.
Identifiers
- Name (when you submit forms or create an account)
- Email address (newsletter signup, contact form, account)
- IP address (security, analytics, fraud prevention)
Usage & Device Data (via cookies and similar tech)
- Pages viewed, links clicked, time on page, referring URL
- Browser type/version, device type, operating system
- Approximate location derived from IP (city/region level)
See our separate Cookie Policy for details on cookies and how to manage consent.
2) How We Use Your Data
- Analytics – to understand readership and improve content.
- Site Improvement & Security – debugging, load balancing, preventing spam/abuse.
- Targeted Advertising – to show ads relevant to your interests (cookie-based).
- Communication – newsletters you opted into; responses to contact requests.
- Legal/Compliance – meeting legal obligations & responding to lawful requests.
3) Lawful Bases for Processing (Kenya DPA, 2019)
- Consent – non-essential cookies, targeted ads, newsletters.
- Legitimate Interests – operating, protecting, and improving our site (aggregate analytics, security).
- Contract – providing requested services/features (e.g., delivering a newsletter you subscribed to).
- Legal Obligation – record-keeping, responding to regulators or lawful requests.
You can withdraw consent at any time via the cookie banner settings or by unsubscribing from emails.
5) International Transfers
If partners or servers are located outside Kenya, we implement safeguards (contractual clauses, vendor due-diligence, security measures) consistent with the DPA.
6) Data Retention
- Account/Contact data: retained as long as necessary to provide services and for a reasonable period thereafter to handle queries or legal obligations.
- Analytics & advertising cookies: retained per vendor defaults (see Cookie Policy/vendor docs).
We delete or anonymize data when it is no longer necessary.
7) Your Rights (Kenya)
Subject to statutory exemptions, you may access, correct, delete, or restrict certain processing of your data, and object to direct marketing. Portability may apply in some cases.
How to make a data request or deletion request
Email privacy@nowke.co.ke with the subject “Data Request”. Include your full name, the email used on our site, the type of request (access, correction, deletion, objection), and any helpful details. We will verify your identity before acting and respond within statutory timelines.
You can also review or change cookie consent settings at any time via the banner.
8) Children’s Privacy
Our site is not directed to children under 13. If you believe a child has provided personal data, contact us and we will delete it.
9) Security
We use reasonable technical and organizational measures (HTTPS, access controls, encryption in transit, least-privilege access, regular updates). No system is 100% secure, but we work to protect your information.
10) Links to Other Sites
Our site may link to third-party websites we do not control. Their privacy practices apply to their sites.
11) Changes to this Policy
We may update this Policy. Material changes will be highlighted here with an updated effective date.
12) Contact & Complaints
Questions or concerns? Email privacy@nowke.co.ke or write to NowKe, Kenya}}.
If unresolved, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.