Privacy Policy

1. Introduction

Techhold Developers is a digital marketing and software development agency headquartered in Nairobi, Kenya. We are committed to protecting your privacy and handling your personal data responsibly.

This policy applies to all personal data we process — whether collected through our website, our client engagements, our recruitment process, or via email, phone, or other communication channels.

We comply with the Kenya Data Protection Act 2019 (the "Act") and, where applicable, the EU's General Data Protection Regulation (GDPR).

2. Definitions

3. Data We Collect

We collect different types of personal data depending on how you interact with us. The table below summarises what we collect and why.

Category	Examples	When Collected
Identity Data	Name, job title, company name	Contact forms, proposals, contracts
Contact Data	Email, phone number, physical address	Contact forms, newsletter signup
Technical Data	IP address, browser type, device info, OS	Website visits, analytics
Usage Data	Pages visited, time on site, referring URLs	Website visits, analytics
Marketing Data	Communication preferences, opt-ins	Newsletter, campaign interactions
Client Project Data	Business information, systems access, credentials	During engagements
Recruitment Data	CV, portfolio, references, qualifications	Job applications

4. How We Use Your Data

We use your personal data for the following purposes:

• Service delivery — To provide the digital marketing, SEO, web development, and software services you have engaged us for.
• Communication — To respond to enquiries, provide project updates, and share relevant information.
• Contractual obligations — To fulfil our contractual commitments to you as a client.
• Marketing — To send you newsletters, insights, and service updates (where you have opted in).
• Improvement — To analyse website performance and improve our services.
• Recruitment — To assess your application if you have submitted a CV or applied for a role.
• Legal compliance — To comply with applicable laws, regulations, and legal processes.
• Security — To detect, prevent, and address fraud, security incidents, or misuse of our services.

5. Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process your data on the following legal bases:

• Consent — Where you have explicitly consented (e.g., newsletter signup).
• Contract — Where processing is necessary to deliver services you've engaged us for.
• Legal obligation — Where we are required to process data to comply with the law.
• Legitimate interests — Where processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement).
• Vital interests — Where processing is necessary to protect someone's life.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data with trusted third parties only in the following circumstances:

• Service providers — Third-party vendors who help us operate (e.g., cloud hosting, analytics, email platforms, CRM tools). All are bound by confidentiality agreements.
• Legal requirements — Where we are legally required to disclose information to authorities.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you.
• With your consent — Where you have explicitly authorised us to share your data.

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and analyse website traffic. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential Cookies — Necessary for the website to function (e.g., security, session management).
• Analytics Cookies — Help us understand how visitors use our site (Google Analytics 4).
• Marketing Cookies — Used to deliver relevant advertising (Google Ads, Meta, LinkedIn).
• Preference Cookies — Remember your settings and preferences.

You can control cookies through your browser settings. Disabling certain cookies may affect your experience on our website.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Client data — Retained for the duration of our engagement plus 7 years, to comply with tax and legal obligations.
• Marketing contacts — Retained until you unsubscribe or request deletion.
• Recruitment data — Retained for 12 months from submission, then deleted unless you re-consent.
• Website analytics — Retained per the policies of our analytics providers (typically 14–26 months).
• Legal & compliance — Retained as long as legally required.

9. Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal data. These include:

• HTTPS encryption across all our web properties
• Secure cloud infrastructure with access controls
• Role-based access to personal data within our team
• Multi-factor authentication on critical systems
• Regular security audits and vulnerability assessments
• Employee confidentiality agreements and data protection training

10. Your Rights

Under the Kenya Data Protection Act 2019 and, where applicable, the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please email us at privacy@techholddev.com. We will respond within 30 days of receiving your request.

11. International Data Transfers

Some of our service providers are located outside Kenya (e.g., cloud infrastructure in the EU, US, or South Africa). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the ODPC or equivalent authorities
• Ensuring recipients offer an adequate level of data protection
• Encryption of data in transit and at rest

12. Children's Privacy

Our services are directed at businesses and adults. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately, and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify registered users via email where appropriate
• Post a prominent notice on our website

We encourage you to review this policy periodically. Your continued use of our website or services after any changes signifies your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the details below.

This Privacy Policy was last updated on October 7, 2025 and is effective immediately.