Privacy notice

What we collect

• From the contact form: your name, email address, and message, and, if you choose to give them, your phone number and company.
• From the project brief form: the same contact details, plus what you tell us about the project, budget, and timeline.
• A scrambled form of your IP address (a keyed hash that can’t be turned back into the address), to limit how many messages one connection can send.
• One cookie, set when you open a page with a form. It records when the page was opened, so we can tell people from automated spam. It holds no personal details, isn’t used for tracking, and expires after 24 hours.

We don’t use analytics, advertising, or tracking of any kind, and the site loads nothing from other companies’ servers.

Why we collect it

• To reply to your enquiry and, if you ask us to, to prepare a proposal.
• To keep the forms safe from spam and abuse.

We never sell your details or use them for marketing.

Who else handles it

• Google (Firebase), which stores enquiries and sends us a notification with your name and email address when one arrives.
• Netlify, which hosts this website and keeps standard server logs, including IP addresses, for a short time for security.

Their servers may be outside Kenya. They handle your details only to provide these services to us.

How long we keep it

• Enquiries: up to 12 months after our last contact with you, then we delete them. If you become a client, your details move into your client record and are kept for as long as the law requires for business records.
• The scrambled IP address: two days.

Your rights

You can ask to see the details we hold about you, to correct them, or to have them deleted, and you can object to how we use them. Email us at the address below; we’ll confirm once it’s done.

If you’re not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Contact

Ndabiforge Limited, Nairobi, Kenya.
ndabistarenterprise@gmail.com