Privacy notice

Draft for legal review. This notice follows the structure of the Kenya Data Protection Act 2019 and the Data Protection (General) Regulations 2021. A qualified advocate must review it before it is published.

Who we are

Agnostix Technologies Ltd ("Agnostix", "we") is a private company incorporated in Kenya under the Companies Act 2015, company number PVT-J616BBEQ. Office: Vision Plaza, Mombasa Road, Nairobi, Kenya.

For this website and our enquiry forms, we are the data controller.

When an operator licenses SaidaLink, that operator is the data controller for its own subscribers. SaidaLink processes that data on the operator's behalf. Questions about that data go to the operator.

What we collect

• Enquiry forms: name, organisation, email, phone (optional), and what you tell us in your message.
• Website use: basic server logs (IP address, browser, pages requested, time) and anonymous, aggregate page statistics. We set no analytics or advertising cookies.

We do not collect sensitive personal data through this site.

Why we use it, and the lawful basis

• To reply to your enquiry and follow up on it: legitimate interest, or steps at your request before a contract (s.30 of the Act).
• To keep the site secure and working: legitimate interest.
• Marketing emails: only with your consent, which you can withdraw at any time.

Who we share it with

• Microsoft Azure, which hosts the site, and Resend, which delivers our email. Both process data for us under contract.
• Group companies (Wekkitech Limited), only where your enquiry concerns them.
• Authorities, where the law requires it.

We do not sell personal data.

Transfers outside Kenya

Some of our providers store data outside Kenya. The site is hosted in Azure's South Africa North region. We only use providers that give appropriate safeguards under s.48–50 of the Act.

How long we keep it

• Enquiries: 24 months after the last contact, unless they become a contract.
• Server logs: 90 days.

Your rights

Under s.26 of the Act you may:

• ask what we hold about you;
• ask us to correct or delete it;
• object to processing;
• withdraw consent;
• ask for your data in a portable format.

To exercise any of these, write to info@agnostixtechnologies.com. We will reply within the time the regulations set.

You may also complain to the Office of the Data Protection Commissioner (ODPC), www.odpc.go.ke.

Security

Access to personal data is limited to staff who need it, and the systems that hold it are logged and backed up.

Changes

If we change this notice, we will update the date above.