Privacy Policy

Data Privacy Policy

Last Updated: April 18, 2025

At Odiwuor Digital, we are committed to protecting the privacy and security of your personal information in accordance with the Data Protection Act 2019 of Kenya and other applicable laws. This Data Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website odiwuordigital.com, engage with our services, or interact with our marketing campaigns. By using our website or services, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information, in compliance with the Kenya Data Protection Act 2019:

a. Personal Information

  • Contact Details: Name, email address, phone number, or mailing address provided when you fill out forms, request services, or contact us.
  • Account Information: Login credentials or profile details if you create an account with us.
  • Payment Information: Billing details (e.g., credit card information) processed through secure third-party payment processors for services purchased.

b. Non-Personal Information

  • Usage Data: Information about how you interact with our website, such as IP address, browser type, device information, pages visited, and time spent on the site.
  • Cookies and Tracking Technologies: Data collected via cookies, web beacons, or similar technologies to enhance your experience and analyze website performance, with your consent where required.
  • Marketing Campaign Data: Information collected through our clients’ campaigns, such as email open rates, click-through rates, or demographic data, as permitted by applicable laws.

c. Information from Third Parties

  • Data provided by clients or partners for marketing purposes (e.g., customer lists for campaigns), processed in accordance with the Kenya Data Protection Act.
  • Analytics data from third-party tools like Google Analytics or social media platforms.

2. How We Use Your Information

We use your information for lawful purposes under the Kenya Data Protection Act 2019, including to:

  • Provide and improve our digital marketing services, such as website development, SEO, social media management, and advertising campaigns.
  • Communicate with you, including responding to inquiries, sending service updates, or delivering promotional materials (with your consent where required under Section 37 of the DPA).
  • Analyze website and campaign performance to optimize user experience and marketing strategies.
  • Process payments and manage client accounts.
  • Comply with legal obligations, including those under the Kenya Data Protection Act, or protect our rights, property, or safety.

3. How We Share Your Information

We do not sell your personal information. In line with Section 25 of the Kenya Data Protection Act, we may share your data only under the following circumstances:

  • Service Providers: Third-party vendors who assist with website hosting, payment processing, analytics, or marketing services. These providers are contractually obligated to comply with data protection laws and protect your data.
  • Clients: When managing campaigns, we may share aggregated or anonymized data with clients to report performance metrics, ensuring compliance with data minimization principles.
  • Legal Authorities: If required by law, regulation, or legal process (e.g., under Section 50 of the DPA), or to protect the rights, safety, or property of Odiwuor Digital, our clients, or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with appropriate safeguards.

4. Cookies and Tracking Technologies

We use cookies and similar technologies, in compliance with Section 37 of the Kenya Data Protection Act, to:

  • Enhance website functionality (e.g., remembering your preferences).
  • Analyze traffic and user behavior.
  • Deliver personalized ads through platforms like Google Ads or social media.

We obtain your consent for non-essential cookies through our cookie consent tool, as required. You can manage cookie preferences through your browser settings or our consent tool. Disabling cookies may affect your experience on our website.

5. Your Rights and Choices

Under the Kenya Data Protection Act 2019 (Sections 26–30) and other applicable laws (e.g., GDPR, CCPA), you have the following rights regarding your personal information:

  • Right to be Informed: Know how your data is collected and processed.
  • Right to Access: Request a copy of the data we hold about you.
  • Right to Rectification: Request corrections to inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data, subject to legal obligations.
  • Right to Restrict Processing: Request restrictions on certain data processing activities.
  • Right to Object: Object to processing, including for direct marketing purposes.
  • Right to Data Portability: Request a transferable copy of your data.
  • Right to Prevent Automated Decision-Making: Object to decisions based solely on automated processing, where applicable.

To exercise these rights, contact us at odiwuordigital@gmail.com. We will respond within 30 days, as required by the Kenya Data Protection Act, or sooner if mandated by other laws.

6. Data Security

We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse, as required by Section 41 of the Kenya Data Protection Act. These include encryption, access controls, and secure data storage. However, no system is completely secure, and we cannot guarantee absolute security.

7. Data Retention

In accordance with Section 39 of the Kenya Data Protection Act, we retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

  • Contact details are kept until you unsubscribe or request deletion.
  • Usage data is retained for analytics purposes in anonymized form.
  • Client campaign data is retained as per our agreements with clients.

Data no longer needed is securely deleted or anonymized.

8. International Data Transfers

As Odiwuor Digital operates in Kenya but provides services globally, your data may be transferred to and processed in Kenya or other countries where our service providers operate. We comply with Section 47 of the Kenya Data Protection Act and other laws (e.g., GDPR) by ensuring appropriate safeguards, such as Standard Contractual Clauses or adequacy agreements, are in place to protect your data during international transfers.

9. Third-Party Links

Our website or campaigns may contain links to third-party websites. We are not responsible for their privacy practices or content. We encourage you to review their privacy policies, as required by Section 25 of the Kenya Data Protection Act.

10. Children’s Privacy

Our services are not directed to individuals under 16, in line with global best practices and the Kenya Data Protection Act. If we learn that we have collected personal information from a child without parental consent, we will delete it promptly.

11. Changes to This Policy

We may update this Data Privacy Policy to reflect changes in our practices or legal requirements, including updates to the Kenya Data Protection Act. We will notify you of significant changes by posting the updated policy on our website with a revised “Last Updated” date, as required by Section 25 of the DPA.

12. Contact Us

If you have questions, concerns, or requests regarding this policy or our data practices, please contact us at:

Odiwuor Digital
Email: odiwuordigital@gmail.com
Phone: +254 0795 564480

For complaints under the Kenya Data Protection Act 2019, you may also contact the Office of the Data Protection Commissioner in Kenya:
Email: info@odpc.go.ke
Website: www.odpc.go.ke