Legal
Privacy notice.
[Draft. Fill in the bracketed company details and have a Kenyan lawyer review this notice before launch.]
- We only collect what you type or attach when you contact us.
- We use it to reply to you and prepare a proposal. Nothing else.
- No analytics, no advertising trackers, no tracking cookies.
- We never sell your information.
- You can ask us to see, correct or delete it at any time.
Who we are
This website is run by [legal name of Riua], registration number [number], based in Nairobi, Kenya ("Riua", "we"). We are the data controller for the information described here. Registration with the Office of the Data Protection Commissioner: [registration number, or "in progress"].
Questions about your data: info@riua.africa.
What we collect, and why
| What you send us | Your name and email; optionally your phone number, organisation, role, website, project details, budget and timeline, your message, voice notes and files. Why: to reply to your enquiry and, if you want, prepare a proposal. |
|---|---|
| Spam protection | A one-way, keyed hash of your IP address (we do not keep the address itself) and your browser's name and version, stored with your enquiry. Why: to spot abuse and keep the form working for everyone. |
| A draft in your browser | While you fill in the project form, a copy of the text is kept in your own browser's local storage, so a reload does not lose your work. It never leaves your device and is cleared when you send. |
We rely on your consent (you choose to send the form) and our legitimate interest in responding to you, under the Data Protection Act, 2019.
What we do not do
- No analytics, advertising or social-media trackers.
- No tracking cookies, so there is no cookie banner.
- No selling, renting or sharing your information for marketing.
- No use of what you send to train AI models.
Who else sees it
Only the services we need to run the form:
- Our hosting provider, [hosting provider and country], where the website and enquiries are stored.
- Our email provider, [email provider], which delivers the notification of your enquiry to us.
- If enabled, Cloudflare Turnstile, which checks that a person, not a bot, sent the form.
If any of these store data outside Kenya, we make sure appropriate safeguards are in place as the Data Protection Act requires.
How long we keep it
- Files you attach but never send are deleted automatically after 24 hours.
- Enquiries that do not become a project are deleted after [number] months.
- If we work together, your information is kept under the terms of our contract.
- Spam is deleted after [number] days.
How we protect it
The site is served over an encrypted connection. Uploaded files are checked, stored under random names and only ever downloaded through signed links that expire. Access is limited to the people who need it to reply to you.
Your rights
Under the Data Protection Act, 2019 you can ask to know what we hold about you, get a copy, have it corrected or deleted, and object to how we use it. Email info@riua.africa and we will respond within [number] days.
If you are not satisfied, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
Changes
If this notice changes, the date at the top changes with it.