Privacy Policy

1. Introduction and data controller

This Privacy Policy explains how Xenvora ("we", "us") collects, uses, and protects personal data submitted through this website. Xenvora is the data controller for the purposes of Kenya's Data Protection Act, 2019, and can be reached at [email protected] or at Uhuru Highway 154, Nairobi 00100.

2. What data we collect and how

We collect the information you provide directly through our contact form — your name, email address, phone number, and message. We also use cookies and similar local storage technologies, described in our Cookie Policy, subject to your consent choices.

3. Purposes and legal basis

4. Data sharing and third parties

We do not sell personal data. We do not share the information you submit with third parties except where required by Kenyan law or where necessary to respond to your enquiry.

5. Retention

We retain contact form submissions only for as long as needed to respond to your enquiry and maintain a reasonable record of correspondence, after which they are deleted.

6. Security

We take reasonable technical and organizational measures to protect the personal data we hold against unauthorized access, loss, or misuse.

7. International transfers

Where any data is processed outside Kenya, we take steps consistent with the Data Protection Act to ensure it receives an adequate level of protection.

8. Your rights

Under the Data Protection Act, 2019, and subject to oversight by the Office of the Data Protection Commissioner (ODPC) of Kenya, you have the right to access, correct, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the ODPC. To exercise these rights, contact us via our contact page.

9. Opt-out and data deletion

Providing data through our contact form is entirely optional. Cookies can be disabled or customized at any time through our Cookie Policy page. To request deletion of any data we hold about you, please reach out through our contact page.