Last updated

Privacy policy

What personal information we collect, why, who we share it with and how long we keep it. In short: only what we need to quote and deliver your project, and we never sell it.

01Who we are

  • HarakaWeb is a web design and software development studio based in Nairobi, Kenya. For the information you give us through this website, WhatsApp or email, we are the data controller under the Kenya Data Protection Act, 2019.
  • Questions about your data go to hello@harakaweb.com or WhatsApp +254 183 210 101.

02What we collect

  • Quote requests: your business name, industry, country, your name, email address, optional WhatsApp number, and the project details you choose to share.
  • Messages: anything you send us by WhatsApp, email or phone, including files such as logos, photos and website content.
  • Clients: billing details needed for invoices. Card and M-Pesa payments are handled by Paystack; we never see or store your card details.
  • Technical data: our hosting provider records standard server logs (such as IP address and browser type) to keep the site running and secure. We use your approximate country only to show prices in the right currency.

03How we use it

  • To reply to your enquiry, prepare a quote and send you a copy of your request.
  • To deliver, support and invoice your project, and to keep records the law requires.
  • We only use your information for these purposes. We don't send marketing messages unless you ask for them, and you can opt out at any time.

04What we don't do

  • We don't sell, rent or trade your personal information.
  • This website doesn't use advertising trackers, analytics cookies or third-party tracking pixels.

05Who we share it with

  • Only the service providers we need to run the business, and only what each one needs: Vercel (website hosting), Resend (sending emails from the quote form), Cloudflare (domain and email routing), our email provider, WhatsApp (Meta) when you message us there, and Paystack for payments.
  • We share information with authorities only when the law requires it.

06Data outside Kenya

  • Some of these providers store data outside Kenya, mainly in the United States and Europe. We use established providers that protect data with security measures such as encryption, as the Data Protection Act requires for transfers abroad.

07How long we keep it

  • Enquiries that don't become projects are deleted within 24 months.
  • Client project files and correspondence are kept while we work together and for 24 months after, so we can support your site.
  • Invoices and payment records are kept for as long as Kenyan tax law requires.

08Keeping it safe

  • The website runs over HTTPS, our accounts use strong passwords and two-factor authentication where available, and access to your information is limited to the people working on your project.
  • If a breach ever puts your information at risk, we'll tell you and the Office of the Data Protection Commissioner as the law requires.

09Your rights

  • Under the Data Protection Act you can ask to see the information we hold about you, have it corrected or deleted, object to how we use it, or receive a copy to take elsewhere.
  • To make a request, email hello@harakaweb.com. We'll respond promptly, and within the time the law requires.
  • If you're not happy with our response, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

10Websites we build or host for you

  • When your website collects information from your own customers, for example through a contact or booking form, you are the data controller for that information and we process it only on your instructions.
  • We access it only to build, host or support your site, and we don't use it for anything else.

11Changes to this policy

  • If we change how we handle personal information, we'll update this page and the date at the top.

Questions about your data?

Email hello@harakaweb.com or message us on WhatsApp. We're happy to explain anything.