Privacy Policy

HylaTeq (“HylaTeq”, “we”, “us”) is a software studio based in Nairobi, Kenya. For the personal data described in this policy, HylaTeq is the data controller, which means we decide why and how it is used.

Contact for anything privacy-related: hilatech33@gmail.com. This is also the contact for data protection requests.

Information you give us. When you use the “Let's talk” form or the contact page, or email us, we receive:

• your name and email address;
• your phone or WhatsApp number, if you choose to add one;
• the service you are interested in;
• the message you write, and anything you choose to tell us about your business;
• the page of our site you sent the enquiry from.

Please do not include sensitive information (such as ID numbers, health details or passwords) in your message. You do not need to for us to help you.

Information collected automatically. Like most websites, our hosting provider records basic technical data when a page is requested, such as your IP address, browser and device type, the page requested and the time. We use this only for security, reliability and fixing faults. When you submit the form, your IP address is also held briefly in server memory to limit spam; it is not stored or added to your enquiry.

What we do not collect. We do not use advertising, analytics or social media tracking on this website, and we do not build profiles of visitors. The site stores one small flag in your browser's session storage so the intro animation plays once per visit. It is not shared with anyone and clears when you close the tab. Fonts are served from our own domain, so your browser does not contact Google Fonts.

Under the Data Protection Act, 2019 we must have a lawful reason for each use of your data. Ours are:

We do not use your details for marketing mailings. If we ever wish to, we will ask for your consent first and you will be able to withdraw it at any time.

We do not sell or rent personal data. We share it only with service providers who process it for us, under their own data protection commitments:

We may also disclose personal data where the law requires it, for example to a court or regulator, or to protect our rights. If HylaTeq were ever sold or restructured, your data could pass to the new owner, who would have to honour this policy.

Our providers operate internationally, so your data may be processed outside Kenya, including in the United States and Europe. Where that happens we rely on providers that apply appropriate safeguards for personal data, as the Data Protection Act, 2019 requires for cross-border transfers. You can ask us for details of the safeguards at hilatech33@gmail.com.

You can ask us to delete your data sooner (see Your rights).

Under the Data Protection Act, 2019 you have the right to:

• be told how your personal data is used (this policy);
• access the personal data we hold about you;
• object to us processing it;
• have inaccurate or incomplete data corrected;
• have your data deleted, where we have no lawful reason to keep it;
• receive your data in a usable format and ask us to restrict how we use it, where the Act gives you those rights;
• withdraw consent at any time, where we rely on it.

To use any of these rights, email hilatech33@gmail.com with the details of your request. We may ask you to confirm your identity so we do not give your data to the wrong person. We will respond as quickly as we can and within the time limits set by law. Exercising your rights is free.

We would like the chance to put things right first, so please contact us at hilatech33@gmail.com. You also have the right to complain to Kenya's regulator, the Office of the Data Protection Commissioner (ODPC), at odpc.go.ke.

This website is served over HTTPS, and form submissions are sent to us over an encrypted connection. Access to the inbox that receives enquiries is limited to the HylaTeq team. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your data, and we will tell you and the ODPC where the law requires us to report a breach.

This website is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 18. If you think a child has sent us information, email hilatech33@gmail.com and we will delete it.

Our pages may link to other websites, such as the ODPC. We do not control them and are not responsible for their privacy practices. Please read their policies.

If we change how we use personal data we will update this page and the “last updated” date above. If a change is significant, for example adding analytics, we will make that clear on the site and ask for consent where the law requires it.

HylaTeq, Nairobi, Kenya
Email: hilatech33@gmail.com