Privacy notice

This notice explains what personal data rosekairu.com collects, why, and what rights you have under Kenya's Data Protection Act, 2019. It covers this website only. Sheria Digital has its own privacy notice at sheriadigital.ke.

Who is responsible

Rose Kairu, Nairobi, Kenya, is responsible for personal data collected through this website. You can reach me at hello@rosekairu.com.

What I collect

• When you use the contact form or email me: your name, email address, organisation if you give it, the reason for contacting me, and your message.
• When you visit the site: my hosting provider keeps standard server logs, such as IP addresses, browser type and the pages requested, to keep the site running and secure.

This site sets no cookies, uses no analytics or advertising trackers, and loads its fonts and its 3D graphics library from its own server rather than from a third party. The Tando demo runs entirely in your browser: nothing you type into it is sent anywhere or stored.

Why I use it

I use your contact details only to read and reply to your message, and to continue a conversation you started. I don't add you to a mailing list, and I don't sell or share your data for marketing.

Who else handles it

• Formspree delivers contact form messages to my inbox.
• Hostinger hosts this website.
• Google Workspace / Gmail stores the emails I receive.

Some of these providers store data outside Kenya. Where that happens, I rely on the safeguards the Data Protection Act requires for transfers abroad.

How long I keep it

I keep messages for up to 12 months after our last exchange, unless we start working together, in which case I keep them for as long as the work and any legal obligations require. Server logs are kept by Hostinger for a limited period under its own policies.

Your rights

Under the Data Protection Act, you have the right to be informed about how your data is used, to access it, to object to its use, and to have it corrected or deleted. To use any of these rights, email hello@rosekairu.com. I'll respond as quickly as I can, and within the time the law allows.

Complaints

If you're not happy with how I've handled your data, please tell me first so I can put it right. You also have the right to complain to the Office of the Data Protection Commissioner at odpc.go.ke.