Privacy Policy

1. Who We Are

JSKenya Solutions Limited ("JSKenya", "we", "us", or "our") is a technology company registered in Kenya, with offices in Industrial Area, Nairobi and Marjo Bypass Complex, Ruiru. We provide web development, custom software, e-commerce, digital marketing, and proprietary software products including SafariSync, Itinerary Builder, and Internet Manager.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at jskenyasolutions.co.ke, use our services, or interact with us in any way.

Contact for privacy matters:
Email: info@jskenyasolutions.co.ke
Phone: +254 720 524 693
Address: Off Lusaka Road, Industrial Area, Nairobi, Kenya

2. Information We Collect

2.1 Information You Provide Directly

• Contact and enquiry forms: name, email address, phone number, company name, and project details when you contact us or request a quote.
• Service delivery: project files, business information, login credentials, and payment details necessary to deliver contracted services.
• SafariSync portal accounts: company name, email address, password (stored as a one-way hash), and business settings for clients using our safari management software.
• Communications: emails, WhatsApp messages, and other correspondence you send us.

2.2 Information Collected Automatically

• Usage data: pages visited, time spent on pages, links clicked, and referring URLs.
• Technical data: IP address, browser type and version, operating system, and device type.
• Cookies and similar technologies: session cookies required for the website to function, and analytics cookies to understand how visitors use our site. See Section 7 for more detail.

2.3 Information From Third Parties

We may receive information about you from payment processors (M-Pesa, PesaPal) when payments are made for our services. We do not receive full card or bank account details — only transaction confirmation references.

3. How We Use Your Information

We use your information for the following purposes, relying on the legal bases noted:

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it only in these circumstances:

• Service providers: trusted third parties who help us operate our business (hosting providers, payment processors, email service providers). They are bound by data processing agreements.
• Legal requirements: when required by Kenyan law, court order, or to protect the rights and safety of JSKenya or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality obligations.
• With your consent: any other sharing we will ask your explicit permission first.

Third-party services we use: Google Analytics (anonymised analytics), Safaricom M-Pesa (payment processing), PesaPal (payment processing), cPanel hosting (Truehost Kenya).

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Client project data: 7 years after project completion (required for tax and legal compliance under Kenyan law).
• Contact enquiries (no contract formed): 2 years.
• SafariSync portal data: for the duration of the subscription plus 1 year after termination.
• Website analytics: 26 months (Google Analytics default).
• Marketing contacts: until you withdraw consent or request deletion.

6. Your Rights Under the Kenya Data Protection Act 2019

Under the Kenya Data Protection Act 2019, you have the right to:

• Access your personal data we hold.
• Rectify inaccurate or incomplete personal data.
• Erasure of your personal data ("right to be forgotten") where there is no overriding legal reason to retain it.
• Restrict processing of your data in certain circumstances.
• Object to processing based on legitimate interests or for direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya at odpc.go.ke.

To exercise any of these rights, contact us at info@jskenyasolutions.co.ke. We will respond within 30 days.

7. Cookies

We use the following types of cookies:

• Strictly necessary cookies: required for the website to function (session management, CSRF protection). Cannot be disabled.
• Analytics cookies: Google Analytics to understand how visitors use our website (anonymised IP addresses). You can opt out by installing the Google Analytics opt-out browser add-on.

You can control cookies through your browser settings. Blocking all cookies may affect website functionality.

8. Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit, encrypted password storage, restricted access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your data is primarily stored on servers located in Kenya (Truehost Kenya). Some third-party services (Google Analytics) may transfer data outside Kenya. We ensure appropriate safeguards are in place for such transfers in compliance with the Kenya Data Protection Act 2019.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a prominent notice on our website and updating the "Last updated" date at the top. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection point of contact: