Here is a detailed Privacy Policy tailored specifically to comply with Kenya’s Data Protection Act, 2019, and related Kenyan laws and regulations. It removes references to foreign laws like GDPR or CCPA and focuses fully on national compliance, ensuring Mesk Kenya meets local requirements.

Privacy Policy

Effective Date: [Insert Date]
Website: https://www.mesk.co.ke
Operator: Mesk Kenya

Mesk Kenya (“we”, “our”, or “us”) is committed to safeguarding your privacy and protecting your personal data in accordance with the Data Protection Act, 2019 (Kenya). This Privacy Policy outlines how we collect, use, disclose, and safeguard personal data collected through our website, https://www.mesk.co.ke, and any related digital platforms.

By using this website, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Definitions

• Personal data: Any information relating to an identified or identifiable natural person.

• Data subject: The individual whose personal data is being processed.

• Data controller: A person or entity that determines the purpose and means of processing personal data.

• Data processor: A person or entity that processes personal data on behalf of the data controller.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Directly Provided Information

• Full name

• Phone number

• Email address

• Physical or billing address

• ID number (where required for verification or legal purposes)

• Payment details (processed via secure third-party platforms)

b) Automatically Collected Information

• IP address

• Browser type and version

• Device identifiers

• Geolocation (if enabled)

• Website usage data and access times

c) Cookies and Similar Technologies

We use cookies to enhance your user experience, track analytics, and support site functionality. You can manage your cookie preferences via your browser.

3. Purpose of Collecting Your Data

We collect your personal data for the following purposes:

• To process orders and deliver services

• To respond to customer inquiries and offer support

• To send updates, promotions, and service-related communication (with consent)

• To manage user accounts

• To improve our website and services

• To comply with legal and regulatory obligations

4. Lawful Basis for Processing

We process your data based on the following lawful grounds under the Kenya Data Protection Act, 2019:

• Your consent

• The necessity to perform a contract or service

• Legal obligation compliance

• Legitimate business interests that do not override your privacy rights

5. Sharing and Disclosure of Personal Data

We do not sell or lease your data. We may share your personal data with:

• Third-party service providers (such as payment processors, IT service providers, or delivery partners)

• Government agencies or regulators as required by law

• Legal representatives in the case of legal proceedings

• Business partners with whom we collaborate, with appropriate safeguards in place

All third parties are obligated to process your data in compliance with this Privacy Policy and the Data Protection Act, 2019.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law (e.g., tax or financial records). When data is no longer needed, it is securely deleted or anonymized.

7. Your Rights as a Data Subject

Under the Data Protection Act, 2019, you have the following rights:

• Right to be informed about the collection and use of your data

• Right to access your personal data

• Right to correction of inaccurate or incomplete data

• Right to deletion (where applicable)

• Right to object to the processing of your data

• Right to data portability

• Right not to be subjected to automated decision-making

• Right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, contact us at the details provided below.

8. Data Security

We implement appropriate technical and organizational measures to ensure the security of your personal data, including:

• Encryption

• Firewalls and access control

• Regular system monitoring

• Staff confidentiality agreements and training

9. Transfer of Data Outside Kenya

If we need to transfer your data outside Kenya, we ensure that such transfers comply with the requirements under Section 48 of the Data Protection Act, 2019. This includes ensuring adequate data protection safeguards in the recipient country.

10. Children’s Data

We do not knowingly collect personal data from persons under the age of 18 without parental or guardian consent. If we learn that we have collected such data, we will delete it immediately.

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. When updates are made, we will revise the “Effective Date” at the top. We encourage users to review this Policy periodically for any changes.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact:

Mesk Kenya
Email: info@mesk.co.ke
Phone: +(254) 768 706 362
Website: https://www.mesk.co.ke
Address: P.O. Box 79103-00400 Royal Square, Ngong Road.

You also have the right to raise concerns with the Office of the Data Protection Commissioner (ODPC):
Website: https://www.odpc.go.ke