Privacy Policy — Alkebulan Innovations Limited

Last updated: 14th September 2026

Alkebulan Innovations Limited, trading as Alkebulan Innovations ("we," "us," "our," or "the Company"), is an information technology service delivery firm. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website [insert website URL] (the "Site") or engage our services, in compliance with the Data Protection Act, 2019 of Kenya ("the DPA") and its subsidiary regulations.

By using our Site or services, you consent to the practices described in this Policy.

1. Who We Are

Alkebulan Innovations Limited is the data controller responsible for personal data collected through this Site.

• Company: Alkebulan Innovations Limited
• Nature of Business: Information technology services and consultancy
• Registered address: Machakos, Kenya
• Contact email: info@alkebulaninnovations.com

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, company/organization name
• Account and service data: login credentials, service usage logs, support tickets, project or configuration data you share with us
• Technical data: IP address, browser type, device information, cookies, and usage analytics
• Communications data: messages sent via contact forms, email, or chat support
• Payment information: billing details for invoicing (we do not store full card numbers; payments are processed via third-party processors)

We only collect data that is necessary, relevant, and limited to the purposes described below (the principle of data minimization under the DPA).

3. How We Collect Data

• Directly from you (forms, account sign-up, email, calls, meetings)
• Automatically through cookies and similar tracking technologies when you browse the Site
• From third parties (e.g., partners or service providers) where you have consented to such data sharing

4. Purpose and Legal Basis for Processing

We process personal data for the following purposes, relying on the legal bases permitted under the DPA:

5. Cookies and Tracking Technologies

Our Site uses cookies to enhance user experience, remember preferences, and gather analytics. You can control cookies through your browser settings. Where required, we will request your consent before placing non-essential cookies via a cookie banner on the Site.

6. How We Share Your Data

We do not sell personal data. We may share data with:

• Service providers who support our operations (e.g., cloud hosting, payment processors, analytics providers), under contractual confidentiality obligations
• Regulatory or government authorities, where required by law
• Business partners, only with your explicit consent (e.g., referrals or joint service delivery)

Any third party processing data on our behalf is bound by a data processing agreement consistent with DPA requirements.

7. International Data Transfers

Where personal data is transferred outside Kenya (for example, to a cloud service provider with servers abroad), we ensure such transfers comply with Section 48 of the DPA — meaning the receiving country has adequate data protection safeguards, or appropriate contractual safeguards (such as standard contractual clauses) are in place, or you have given explicit consent to the transfer.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law (e.g., tax and company records retention requirements under Kenyan law). When no longer needed, data is securely deleted or anonymized.

9. Your Rights as a Data Subject

Under the DPA, you have the right to:

• Be informed of the use of your personal data
• Access your personal data held by us
• Object to processing of your data
• Correct or update inaccurate or outdated personal data
• Request deletion of your personal data
• Restrict or object to processing under certain circumstances
• Data portability, where applicable
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated

To exercise any of these rights, contact us at info@alkebulaninnovations.com. We will respond within the statutory timeframe.

10. Data Security

We implement appropriate technical and organizational measures — including encryption, access controls, and secure infrastructure — to protect personal data against unauthorized access, loss, or misuse, consistent with our nature as an IT service provider.

11. Children's Data

Our Site and services are not directed at children, and we do not knowingly collect personal data from minors without parental/guardian consent, in line with Section 33 of the DPA.

12. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.

14. Contact Us

For questions, concerns, or to exercise your data protection rights, please contact:

Alkebulan Innovations Limited Email: info@alkebulaninnovations.com Address: Machakos, Kenya