Privacy Policy

Last Updated: September 2026

KINGMAN DIGITAL CYBER NETWORK (KDCN) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services.

This policy complies with the Kenya Data Protection Act (POPIA) and the EU General Data Protection Regulation (GDPR) where applicable. We believe that "No data left unguarded" is not just a motto — it's our engineering standard.

1. Information We Collect

1.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, and any other details you provide when using our contact forms, booking consultations, or reaching out to us.
• Communication Data: Messages, inquiries, feedback, or support requests you send to us via email, WhatsApp, or our website forms.
• Service Data: Information you provide when engaging our services, such as project details, system requirements, or business information.

1.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, links clicked, and other browsing actions on our website.
• Device Data: IP address, browser type and version, operating system, device type, and screen resolution.
• Location Data: Approximate geographic location derived from your IP address.
• Cookie Data: We use essential and functional cookies to improve your browsing experience. For more details, see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Services: Operate, maintain, and improve our website and services.
• To Respond to Inquiries: Answer your questions, respond to support requests, and provide consultation services.
• To Send Updates: Provide you with security alerts, service updates, and information about our offerings — only where you have opted in.
• To Improve Our Platform: Analyze usage trends, monitor performance, and enhance user experience.
• To Ensure Security: Detect, prevent, and address technical issues, security vulnerabilities, and fraudulent activities.
• To Comply with Legal Obligations: Fulfill regulatory requirements and enforce our Terms of Service.

3. Legal Basis for Processing (POPIA / GDPR)

Under data protection laws, we rely on the following legal bases to process your personal data:

• Consent: Where you have given explicit consent for specific purposes (e.g., receiving marketing communications). You may withdraw this consent at any time.
• Contractual Necessity: Where processing is necessary to respond to your inquiries or deliver services you have requested.
• Legitimate Interest: Where processing is necessary for our legitimate business interests, including improving our website, ensuring security, and preventing fraud.
• Legal Obligation: Where processing is required to comply with applicable laws and regulations.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party services (e.g., Formspree for contact forms, GitHub Pages for hosting) that process data on our behalf. These providers are contractually obligated to protect your data and comply with relevant privacy laws.
• Legal Compliance: We may disclose your information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity, with notice provided to you.
• Protection of Rights: We may share information to protect the rights, property, or safety of KDCN, our users, or others.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption: All data transmitted between your browser and our website is encrypted using TLS/HTTPS.
• Access Controls: We limit access to personal data to authorized personnel only, with strict need-to-know principles.
• Security Monitoring: We regularly monitor our systems for potential vulnerabilities and security threats.
• Data Minimization: We collect only what is necessary and retain it only as long as required.
• Regular Reviews: We conduct periodic security assessments and update our practices accordingly.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to continuous improvement.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:

• Inquiries and Correspondence: Retained for up to 24 months after the last communication, unless a longer period is required by law.
• Client and Service Data: Retained for the duration of the service engagement and up to 5 years thereafter for legal and audit purposes.
• Website Analytics Data: Retained in aggregated form for up to 12 months. Individual IP addresses are anonymized where possible.
• Cookie Data: Retained based on your cookie preferences. Essential cookies may persist until you clear your browser cache.

When data is no longer needed, we securely delete or anonymize it.

7. Your Data Subject Rights (POPIA & GDPR)

Under POPIA and GDPR, you have the following rights regarding your personal data. We are committed to facilitating these rights in a timely and transparent manner.

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Deletion (Right to be Forgotten): You have the right to request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restriction: You have the right to request restriction of processing of your personal data in certain circumstances.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to request a copy of your data in a structured, commonly used, and machine-readable format, and to transfer it to another data controller.
• Right to Withdraw Consent: Where we rely on consent as the legal basis, you have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in the Contact section below. We will respond to your request within 30 days, as required by law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our website. These include:

• Essential Cookies: Required for the basic functionality of the website (e.g., navigation, security).
• Functional Cookies: Enhance your experience by remembering your preferences (e.g., dark/light mode).
• Analytics Cookies: Help us understand how visitors use our website (e.g., page views, navigation paths).

For detailed information about the cookies we use and how to manage them, please visit our Cookie Policy and Cookie Preferences page.

9. Third-Party Services

We use the following third-party services that may collect, process, or store data on our behalf:

• Formspree: Used for processing contact form submissions. Data is transmitted securely via HTTPS. Read Formspree's Privacy Policy.
• GitHub Pages: Used to host our static website. Read GitHub's Privacy Statement.
• Cloud Infrastructure: We may use Google Cloud or other providers for certain services, with data protection safeguards in place.

We encourage you to review the privacy policies of these third-party providers.

10. Children's Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Kenya. We ensure that any such transfers are conducted in compliance with applicable data protection laws and that appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are in place.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We encourage you to review this page periodically for the latest information. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

If we make significant changes, we will notify you through a prominent notice on our website or via email (where appropriate).

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

© 2026 KINGMAN DIGITAL CYBER NETWORK. All rights reserved.

Built in Manyatta. Engineered for the world.