Privacy Policy

Who we are

This website, securebits.africa, is operated by Securebits Infosec Limited(“Securebits”, “we”, “us”), headquartered at 4th Floor, Office 18, Park Suites, Parklands Road, P.O Box 39107-00623, Nairobi, Kenya, with a regional office at Sharjah Media City (SHAMS), P.O Box 515000, Sharjah, UAE. For the personal data described here, we act as the data controller under Kenya's Data Protection Act, 2019.

What we collect

We only collect what you choose to give us, plus a small amount of technical information needed to keep the site secure.

Solution assistant: your name, company, email address and/or phone number, the answers you select, the conversation with the assistant, the solution match it produces, and, if you ask for a consultant, your preferred call time and message.
Contact, partner and incident forms: your name, organization, email address, phone number (optional on most forms), topic of interest and message.
Careers form: your name, email address, phone number (optional), area of interest and what you tell us about yourself.
Downloads: your name, company and email address when you request a document such as our company profile. We email you a personal link that works for 48 hours, and record when it is opened.
Technical information:a pseudonymised (salted hash) form of your IP address, your browser's user-agent string, the page you came from and any campaign tags in the link you followed. We use these to prevent abuse and to understand which pages bring enquiries. Our hosting provider also keeps standard server access logs.
Your consent: a record of the consent wording you agreed to and when.

Please do not include sensitive personal data (for example health or financial account details) or confidential details about your systems in free-text fields. We will ask for what we need, through the right channel, once we are working together.

How we use it

To respond to your enquiry and recommend a suitable solution.
To follow up with you about the enquiry you started, including a call if you began the assistant but did not finish, to check whether you had any difficulty.
To arrange consultations, demonstrations and proofs of concept that you ask for.
To keep the website secure, prevent spam and understand which content is useful.

We do not sell your personal data, and we do not add you to marketing mailing lists without your separate, explicit agreement.

Lawful basis

We process the details you submit on the basis of your consent, which you give by ticking the consent box on each form. You can withdraw consent at any time by contacting us; this does not affect processing carried out before you withdrew it. We process technical security information on the basis of our legitimate interest in protecting the website and our visitors.

Our service providers: our web hosting and email providers, who store and deliver the data on our behalf and may not use it for their own purposes.
Technology vendors, only with your agreement: when you ask for a quotation, demonstration or proof of concept, we may need to share your company and contact details with the relevant vendor. We will tell you before we do.
Authorities: where the law requires us to, for example in response to a lawful request from a regulator or court.

Transfers outside Kenya

Our hosting and email providers may store data on servers located outside Kenya. Where personal data is transferred outside Kenya, we do so only in line with the Data Protection Act's requirements on cross-border transfers, relying on providers that apply appropriate security safeguards. Contact us if you would like more detail.

How long we keep it

Assistant conversations and website enquiries, including careers submissions, are deleted automatically 3 months after the last activity on them, unless the enquiry becomes a business relationship, in which case we keep the relevant records for as long as the relationship and our legal obligations require. Copies of enquiries that reach our team mailbox are cleared on the same basis. Records used only to prevent abuse are deleted within a day. You can ask us to delete your data sooner.

How we protect it

All traffic to this website is encrypted in transit (HTTPS).
Submitted data is stored outside the public part of our web server and is never published.
Only authorized Securebits staff can view enquiries, through a password-protected dashboard.
IP addresses are pseudonymised in our application data, and forms are protected against automated abuse.

If a personal data breach occurs that is likely to put your rights at risk, we will notify the Office of the Data Protection Commissioner and, where required, you, as the Act requires.

Cookies

The public pages of this website do not set cookies and do not use advertising or analytics trackers. To know which page or campaign brought you to us, your browser keeps a small note (the referring site, landing page and campaign tags) in its session storage for the length of your visit; it is sent to us only if you submit a form, and is cleared when you close the tab. The only cookie we use is a strictly necessary session cookie on our internal staff dashboard, which visitors never see. To understand which pages and services interest visitors, we count page views and clicks (for example, how many people opened our data loss prevention assistant). These are anonymous daily totals: no cookies, no IP address and nothing that identifies you is used or stored for them. A second session-storage note simply marks the first page of your visit so a visit is counted once.

If you click a WhatsApp, LinkedIn or email link, that service's own privacy policy applies once you leave our site.

Your rights

Under the Data Protection Act, 2019, you have the right to:

be informed of how your personal data is used;
access the personal data we hold about you;
object to the processing of all or part of your personal data;
have false or misleading data corrected;
have false, misleading or unlawfully processed data deleted; and
receive the data you gave us in a structured, commonly used format (data portability).

To exercise any of these rights, email info@securebits.africa. We may need to confirm your identity before acting on a request. Visitors from the United Arab Emirates and other countries can contact us the same way; we will respond in line with the law that applies to you.

This website is intended for business users and is not directed at children.

Contact and complaints

For any privacy question or request, contact us at info@securebits.africa or +254 727 945 803. If you are not satisfied with our response, you can lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya at odpc.go.ke.

We may update this policy from time to time. The date at the top shows when it last changed.