Privacy Policy

1. Introduction & Data Controller

This policy explains how Eldrion ("we", "us", "our") collects, uses and protects personal data when you visit this website or get in touch with us. The data controller is Eldrion, of Moi Avenue 214, Eldoret 30100, Kenya. You can reach us at [email protected] with any question about how your data is handled.

We process personal data in accordance with Kenya's Data Protection Act, 2019, and the regulations issued under it, under the oversight of the Office of the Data Protection Commissioner (ODPC).

2. What Data We Collect

We collect personal data you provide directly, primarily through the contact form on this site: your name, email address, phone number (if given), and the content of your message. We also use cookies, described in our Cookie Policy, to support core site function and, where you consent, analytics and personalization.

3. Purposes and Legal Basis

4. Data Sharing / Third Parties

We do not sell personal data. We do not share the details you submit with third parties except where required by Kenyan law or where necessary to respond to a legal request from a competent authority.

5. Retention

We keep enquiry and contact form data only as long as needed to respond to you and, where a session is booked, for the duration of our working relationship plus a reasonable period afterward for record-keeping. You may ask us to delete your data sooner, as described below.

6. Security

We take reasonable technical and organisational measures to protect the personal data we hold against loss, misuse, or unauthorised access, consistent with the standards expected under the Data Protection Act, 2019.

7. International Transfers

We do not routinely transfer personal data outside Kenya. If this ever becomes necessary, we will ensure appropriate safeguards are in place as required under the Act.

8. Your Rights

Under the Data Protection Act, 2019, you have the right to be informed of the use of your data, to access the data we hold about you, to request correction or deletion, to object to processing, and to lodge a complaint with the Office of the Data Protection Commissioner if you believe your rights have been infringed. To exercise any of these rights, contact us via the contact page.

9. Opt-Out & Data Deletion

Providing your data through our contact form is entirely optional; if you choose not to share it, we simply won't be able to respond to your enquiry. You can disable non-essential cookies at any time through the cookie preferences panel, and you may request deletion of your personal data by writing to us via the contact page.