Privacy Policy
Last updated: January 2026
This policy explains what personal data Nawe Technologies Ltd ("Nawe", "we", "us") collects, why we collect it, how we use and protect it, and the rights you have. It covers our website, the enquiry form, and the accounts and client portal we operate. We process personal data in accordance with the Kenya Data Protection Act, 2019 and its regulations.
1. Who is responsible
We are the data controller for the personal data described in this policy. If you have any question about how your data is handled, contact us at bnderi@nawetechltd.co.ke or Nawe Technologies Ltd, Kangundo Road, Nairobi, Kenya.
2. Information we collect
- Contact details: name, email address, phone number, and the organisation you belong to, when you fill in the enquiry form or contact us.
- Enquiry details: what you ask us about, so we can respond to you.
- Account information: the email address and password you register in the client portal, plus billing contact details.
- Service data: information needed to operate your hosting or project, such as server names, IP addresses, domain registrations and usage data.
- Correspondence: records of calls, emails and messages so we can provide and improve our service.
3. How we use your information
- To respond to enquiries and provide quotations.
- To deliver, operate and support the services you have bought.
- To manage your account, billing and the client portal.
- To meet our legal and regulatory obligations.
- To monitor and improve our website and services.
4. Legal basis
We rely on the following legal bases under the Kenya Data Protection Act, 2019:
- Consent, where you provide information voluntarily through the enquiry form or a marketing preference.
- Performance of a contract, where we process data to deliver a service you have engaged us for.
- Compliance with a legal obligation, where the law requires us to keep records.
- Legitimate interests, for operating, securing and improving our systems, weighed against your rights and interests.
5. Sharing
We do not sell your personal data.
We share data only where needed to deliver our services, including: hosting and infrastructure providers, payment processors, domain registrars, and professional advisers, in each case under written arrangements that require them to protect your data.
6. International transfers
Some of the infrastructure and tools used to deliver our services may store or process data outside Kenya. Where we transfer personal data across borders, we take reasonable steps to ensure it receives an adequate level of protection.
7. Retention
We keep personal data only as long as necessary for the purposes in this policy, to comply with our legal and tax obligations, and to resolve disputes. Enquiry data is retained while we need it to respond to you; account and billing records are kept for the period required by law.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and restricting staff access to data they genuinely need. No method of transmission is completely secure, and we cannot guarantee absolute security.
9. Your rights
Under the Kenya Data Protection Act, 2019 you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data where the law allows.
- Restrict or object to certain processing.
- Withdraw consent at any time, where processing is based on consent.
- Complain to the Office of the Data Protection Commissioner if you believe we have not handled your data lawfully.
To exercise any of these rights, contact bnderi@nawetechltd.co.ke. We will respond within the period required by law.
10. Cookies and analytics
We use essential cookies to run the site and the client portal. If we add analytics or advertising cookies, we will ask for your consent before they are used, in line with data protection requirements.
11. Children
Our services are directed at businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The current version is always available at /privacy, and we will notify you of significant changes where required by law. Continued use of our services after a change means you accept the updated policy.