Privacy Policy

1. Introduction

Innovationia Connect (“we,” “us,” “our,” or “the Agency”) is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard your personal data when you interact with us, including when you visit our website [Insert Website URL], engage our services, or contact us via email or phone.

We are a data controller regulated by the Data Protection Act, 2019 of Kenya (the “Act”) and we adhere to its principles of data processing.

Our contact details for any data privacy-related inquiries are:
Email: [email protected]
Phone: +254706023088

2. The Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and Contact Data: Your name, company name, email address, telephone number, postal address, and job title.

• Financial and Transaction Data: Bank account details, payment card information (processed securely by our third-party payment processors), billing address, and details of services you have purchased from us.

• Technical and Usage Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access our website. This also includes information about how you use our website.

• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

• Client Content: Any data, images, text, or other content you provide to us for the purpose of delivering our digital marketing services. This may include, but is not limited to, access credentials to your social media accounts or website backend (which we handle with strict confidentiality).

• Correspondence: Any personal data you provide when you contact us with inquiries, complaints, or feedback.

3. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

• Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our website, corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:

  • Apply for our services;

  • Request marketing to be sent to you;

  • Give us feedback or contact us.

• Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.

• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as analytics providers (like Google) or from your public social media profiles where relevant to our service delivery.

4. How We Use Your Personal Data (Lawful Bases for Processing)

We will only use your personal data when the law allows us to. Our primary lawful bases for processing are:

• Performance of a Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into such a contract.

• Legitimate Interests: Processing necessary for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests. Our legitimate interests include: managing our business, providing administrative services, marketing our services, and ensuring network and information security.

• Consent: In specific circumstances, we will ask for your explicit consent to process your personal data, for example, for sending certain types of marketing communications.

• Legal Obligation: Processing necessary to comply with our legal obligations under Kenyan law.

The table below describes our processing purposes:

5. Data Sharing and Disclosures

We may share your personal data with the following categories of third parties:

• Service Providers: Who provide IT, system administration, payment processing, and other support services.

• Professional Advisers: Including lawyers, bankers, auditors, and insurers based in Kenya who provide consultancy, banking, legal, insurance, and accounting services.

• Regulatory Authorities: The Office of the Data Protection Commissioner (ODPC) and other authorities in Kenya who require reporting of processing activities in certain circumstances.

• Third Parties in Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. International Data Transfers

We primarily store and process your data within Kenya. However, some of our third-party service providers (e.g., cloud storage providers, email marketing platforms) may be based outside Kenya. In such cases, we will ensure that appropriate safeguards, as prescribed by the Data Protection Act, are in place to protect your personal data. These may include transferring data to countries deemed to have adequate data protection laws or using specific contracts approved for use in Kenya.

7. Data Security

We have implemented appropriate technical and organizational security measures designed to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

9. Your Data Protection Rights

Under the Data Protection Act, 2019, you have several rights, including:

• The right to access: You can request a copy of the personal data we hold about you.

• The right to correction: You can request that we correct any inaccurate or incomplete data we hold about you.

• The right to erasure: You can request the deletion of your personal data where there is no compelling reason for us to continue processing it.

• The right to object to processing: You can object to our processing of your personal data based on our legitimate interests.

• The right to withdraw consent: Where we rely on your consent to process your data, you can withdraw that consent at any time.

• The right to data portability: You can request the transfer of your data to another controller in a structured, machine-readable format.

To exercise any of these rights, please contact us using the details provided in Section 1.

10. Complaints

If you have any concerns about how we handle your data, we encourage you to contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

Office of the Data Protection Commissioner
P.O. Box 30920-00100, Nairobi, Kenya
Email: [email protected]
Website: www.odpc.go.ke

11. Changes to This Privacy Policy

We may update this Policy from time to time. The latest version will always be posted on our website with an updated effective date. We will notify you of any material changes by email or a notice on our website.

Innovationia Connect
Digital Marketing Agency
Email: [email protected]
Phone: +254706023088