Privacy policy

Who we are

E&M Tech House ("we", "us", "our") is the data controller for personal data collected through emtechhouse.co.ke (the "website"). We process personal data in line with the Data Protection Act, 2019 of Kenya and its regulations.

E&M Tech House, 2nd Floor, Eneo at Tatu City, Nairobi. P.O. Box 11001 – 00100, Nairobi, Kenya. Email: info@emtechhouse.co.ke.

What we collect

When you contact us. Through the contact form: your name, work email, and optionally your company and phone number, together with your message and the language you were using.

When you subscribe to our newsletter. Your email address and preferred language.

When you browse the website. We count page views using our own system, without cookies. For each view we record the page, the website you came from (its domain only), the type of device, the language and the country you are browsing from, which we work out from your IP address. To count unique visitors, we combine your IP address and browser details with a secret value that changes every day and keep only a short, irreversible code. We never store your IP address, and the code cannot be linked to you or followed from one day to the next. If your browser sends a "Do Not Track" signal, we do not record the visit.

Cookies. We use a few cookies that the website needs to work, and, only if you agree, analytics and marketing cookies. See our cookie policy.

We do not knowingly collect sensitive personal data, and we ask you not to include it in your messages.

How we use your data

To reply to your enquiry and, if you ask, to discuss or provide our services. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
To send our newsletter. Our lawful basis is your consent. Every email lets you unsubscribe, and you can also email us to stop.
To understand and improve the website using anonymous statistics. Our lawful basis is our legitimate interest in running a useful, secure website.
To run analytics or marketing tools, only where you have accepted those cookies. Our lawful basis is your consent.
To keep the website secure and meet legal obligations, for example keeping records required by law or responding to lawful requests from authorities.

We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.

We share personal data only where needed, with:

service providers who host the website and its database, send email or provide analytics, under contracts that require them to protect it and use it only on our instructions;
our professional advisers, such as lawyers and auditors, where necessary;
authorities, regulators or courts, where the law requires it.

Transfers outside Kenya

Some of our service providers may store or process data outside Kenya. When that happens we make sure it is protected as the Data Protection Act requires, for example through contractual safeguards with the provider.

How long we keep it

Enquiries: for up to two years after our last contact with you, unless they lead to a contract, in which case we keep them for as long as the law requires for business records.
Newsletter details: until you unsubscribe.
Website statistics: for up to two years. They contain no IP addresses or cookies.

How we protect it

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access for staff who need it, and secure hosting. No system is completely secure, so please contact us straight away if you think your data has been put at risk.

Your rights

Under the Data Protection Act, 2019 you have the right to:

be informed about how your personal data is used;
access the personal data we hold about you;
ask us to correct data that is inaccurate or incomplete;
ask us to delete data that is no longer needed or that we hold unlawfully;
object to processing, including direct marketing;
withdraw your consent at any time, without affecting processing that took place before;
receive your data in a portable format, where the law provides for it.

To use any of these rights, email info@emtechhouse.co.ke. We may need to confirm your identity first, and we will respond within the time the law requires.

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Children

The website is meant for businesses and organisations and is not aimed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed. If we make significant changes, we will make that clear on the website.