Privacy Policy

1. Who We Are

Edos Centre (“we”, “our”, “us”) is a data analytics, data engineering and SaaS development company operating in East Africa, headquartered in Nairobi, Kenya. This Privacy Policy explains how we collect, use, store and protect personal data when you interact with our website, products and services.

We are committed to compliance with the Kenya Data Protection Act 2019 (DPA 2019) and applicable international data protection standards.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number, organisation — collected when you submit a contact or consultation form.
• Communication data: messages, enquiry details and follow-up correspondence.
• Newsletter subscription: email address and subscription preferences.
• Technical data: IP address, browser type, pages visited and time on site — collected automatically via server logs and analytics tools.
• Project data: information you share with us during the course of an engagement — governed separately by our client services agreement.

3. How We Use Your Data

• Responding to enquiries and consultation requests
• Delivering services and fulfilling contractual obligations
• Sending newsletters and thought leadership content (with your consent)
• Improving our website and service offerings
• Legal and regulatory compliance

We do not sell, rent or share your personal data with third parties for marketing purposes. We share data only with service providers who process it on our behalf (e.g., Supabase for database hosting, Resend for email delivery) and only to the extent necessary for service delivery.

4. Legal Basis for Processing

• Contract: processing necessary to deliver services you have requested.
• Legitimate interests: responding to enquiries, improving our services, security monitoring.
• Consent: newsletter subscriptions and marketing communications.
• Legal obligation: compliance with applicable laws and regulations.

5. Data Retention

We retain contact enquiry data for 3 years from the date of last interaction. Newsletter subscriber data is retained until you unsubscribe. Project data is retained for the duration specified in our client services agreement. Technical/log data is retained for 12 months.

6. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (where no legal obligation requires retention)
• Object to processing based on legitimate interests
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise these rights, contact us at privacy@edoscentre.com.

7. Cookies

Our website uses essential cookies necessary for security and session management. We do not use third-party advertising cookies. Analytics data is collected using privacy-respecting server-side tooling and does not involve personal data being shared with advertising networks.

8. Security

We implement appropriate technical and organisational measures to protect your personal data — including encryption at rest, access controls, and regular security reviews. Our database infrastructure uses Supabase with Row Level Security policies and encrypted connections.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to subscribers and posted on this page with a revised effective date.

10. Contact

For privacy enquiries, contact our Data Protection Officer at: privacy@edoscentre.com
Edos Centre, Nairobi, Kenya.