Privacy Policy

Last Updated: March 31, 2026

1. Compliance with Kenyan Law

Altoby Digital Studio ("Altoby," "we," "us," or "our") is committed to protecting the privacy and security of your personal data. This policy is aligned with the **Kenya Data Protection Act (2019)** and internationally recognized data protection principles.

We process personal data only where we have a lawful basis—primarily to perform our contract with you or to fulfill a legal obligation.

2. Data We Collect

We collect information necessary to provide professional digital services, including:

  • Identity & Contact: Names, business addresses, email, and phone/WhatsApp numbers.
  • Project & Business Data: Content, strategy documents, and proprietary information shared for website builds or SEO.
  • Technical & Usage Data: IP addresses, browser types, and navigation patterns collected via Google Analytics.
  • Integrated CRM Data: Lead information captured via client websites and processed through our automation frameworks.

3. Use of Your Data

We process your data to:

  • Deliver and support your web, SEO, and automation projects.
  • Manage client accounts, billing, and tax obligations under the laws of the Republic of Kenya.
  • Optimize automation workflows (e.g., lead routing and CRM syncing).
  • Communicate project updates and high-value service insights.

4. Data Retention & Deletion

We retain client data only for as long as necessary to fulfill our service agreement or comply with statutory requirements. Project backups and analytical data are typically purged 24 months after a project becomes inactive, unless a separate Service Level Agreement (SLA) is in place.

5. Automation & Cross-Border Transfers

To provide high-speed growth tools, we use third-party processors (including Zapier, Make, and Google Cloud). By using our services, you acknowledge that your data may be processed on secure servers located outside of Kenya.

We ensure all third-party partners maintain rigorous security standards equivalent to or exceeding local requirements.

6. Security Measures

We implement **"Privacy by Design"** principles. This includes encrypted communications (SSL/TLS), secure hosting environments, and restricted internal access to client project files.

7. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete information.
  • Request Erasure of your data (where applicable).
  • Object to processing or request data portability.

To exercise these rights, contact our Data Lead at hello@altoby.com.

8. Cookies

We use essential and analytical cookies to optimize site performance. You may disable non-essential cookies via your browser settings without losing core site functionality.