What we collect, and why.

When you submit the contact form, we receive what you typed into it:

• Your name and email address, which the form requires.
• Your company, phone number, project type and budget range, all of which are optional.
• The message you wrote.

We also record the IP address a submission arrives from. It is held briefly in memory to limit how many times the form can be submitted from one address in a fifteen-minute window, and it is not stored beyond that. If delivery of your enquiry fails, the submission is written to our server logs so that it can be recovered and answered rather than lost.

We use Umami, an analytics tool we host ourselves at analytics.awesome.co.ke. It does not set cookies and does not follow you across other websites. It records page views along with general technical information such as the page you arrived from, your browser, operating system, device type and country.

We use this to understand which pages are read, nothing more. It is not used to build a profile of you and it is not shared with an advertising network.

This site sets no cookies. If you switch between the light and dark theme, that choice is saved in your browser's local storage under the name v2-theme so the site remembers it on your next visit. It never leaves your device and we cannot read it.

Fonts are served from our own domain rather than from a third-party font service, so loading a page does not tell anyone else that you visited.

Enquiries submitted through the contact form are delivered to our inbox by Resend, an email delivery service. Your submission passes through their systems in order to reach us, which may involve processing outside Kenya.

Beyond that, we do not sell your information, share it with advertisers, or pass it to anyone who is not directly involved in answering you. We may disclose information where the law requires it.

When you send us an enquiry, you are asking us to get in touch — we process what you sent in order to respond, and because we have a legitimate interest in answering people who contact us about our work.

Analytics is processed on the basis of our legitimate interest in understanding how the site is used, which is why it is collected in a form that does not identify you.

Enquiry correspondence stays in our email records for as long as it is useful — while we are talking, and afterwards as a record of work discussed. Ask us to delete it and we will.

Analytics data is aggregate and is retained as long as it remains useful for understanding traffic to the site. Rate-limiting records disappear within fifteen minutes.

Under Kenya's Data Protection Act 2019 you have the right to:

• Ask what personal data we hold about you and get a copy of it.
• Have inaccurate data corrected.
• Ask us to delete data we hold about you.
• Object to how we are processing it.
• Complain to the Office of the Data Protection Commissioner if you think we have got it wrong.

Email [email protected] to exercise any of these. We will respond within the timeframe the Act requires.

The site is served over HTTPS and sets a content security policy restricting what may run on the page. Enquiries reach us over encrypted connections. No system is perfectly secure, and we do not claim otherwise — but we do not collect payment details or sensitive personal data through this website at all, so there is little here to lose.

If we change what this site collects, we will update this page and the date above it. Material changes to how we handle enquiries already sent to us will be communicated to the people affected.