Privacy Policy

Upanishi Holdings Limited ("the Company", "we", "us" or "our") is a technology company incorporated and registered in Kenya. This Privacy Policy explains how we collect, use, store and protect personal data in connection with our website and business activities.

For the purposes of the Kenya Data Protection Act (2019), Upanishi Holdings Limited is the data controller in respect of personal data collected through this website.

We may collect the following categories of personal data:

— Contact information (name, email address, telephone number) provided when you submit an enquiry through our website.

— Usage data (IP address, browser type, pages visited, time spent on pages) collected automatically when you visit our website.

— Correspondence data (the content of messages you send us by email or through our contact form).

We do not collect sensitive personal data (as defined under the Data Protection Act) through this website.

We use personal data for the following purposes:

— To respond to enquiries and communications you send us.

— To operate and improve our website.

— To comply with our legal and regulatory obligations.

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

We process personal data on the following legal bases under the Kenya Data Protection Act:

— Consent: where you have provided your data voluntarily (e.g. by submitting a contact form).

— Legitimate interests: where processing is necessary for the legitimate interests of the Company, provided those interests are not overridden by your rights and interests.

— Legal obligation: where processing is required to comply with applicable law.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact enquiries are typically retained for a period of two years unless a longer retention period is required.

We do not share personal data with third parties except:

— Where required by law or a court order.

— With service providers who process data on our behalf under appropriate data processing agreements (e.g. website hosting, email services).

— Where you have given explicit consent.

Where data is transferred outside Kenya, we take steps to ensure an adequate level of protection is in place.

Under the Kenya Data Protection Act, you have the following rights in respect of your personal data:

— The right to be informed about how your data is used.

— The right to access your personal data.

— The right to correct inaccurate personal data.

— The right to erasure of your personal data in certain circumstances.

— The right to object to processing.

To exercise any of these rights, please contact us using the details on our Contact page. We will respond within the timeframes required by law.

Our website may use cookies and similar technologies to support its operation and to understand how visitors use the site. You may control cookie settings through your browser. Disabling cookies may affect the functionality of some parts of the website.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take our obligations seriously.

We may update this Privacy Policy from time to time. The current version will always be available on this page. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us via our Contact page.