Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how Imran Shiundu ("we", "our", "us") collects, uses, discloses, and protects your personal data when you visit imranisdev.top or engage our services. We are committed to protecting your privacy in compliance with the Kenya Data Protection Act, 2019 and other applicable data protection laws.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

  • Fill out a contact form — name, email address, phone number, company name, and message.
  • Complete the Project Planner questionnaire — name, email, phone, project details, budget, timeline, and technical requirements.
  • Engage our services — billing information, company details, project assets, and communications.
  • Subscribe to newsletters or updates — email address and preferences.

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Usage Data: Pages visited, time spent, referring URL, browser type, device type, and operating system.
  • Analytics Data: Anonymous, aggregated data via Vercel Analytics and standard web analytics tools.
  • Cookies: Essential cookies for site functionality. We do not use tracking or advertising cookies. See our Cookie Policy in Section 7.

2. How We Use Your Information

We use your information for the following purposes:

  • To respond to inquiries and provide customer support.
  • To deliver, manage, and invoice for services you have engaged.
  • To communicate about project updates, timelines, and deliverables.
  • To improve our website and services based on usage patterns.
  • To comply with legal obligations and enforce our agreements.
  • To send occasional service-related announcements (you can opt out at any time).

We do not sell, rent, or trade your personal information to third parties for any purpose.

3. Legal Basis for Processing

We process your data under the following legal bases:

  • Performance of a Contract: To fulfill our obligations under a service agreement with you.
  • Consent: Where you have explicitly provided consent (e.g., contact form submissions).
  • Legitimate Interests: To operate and improve our website, prevent fraud, and ensure network security.
  • Legal Obligation: To comply with applicable laws and regulatory requirements.

4. Data Sharing & Disclosure

We may share your data with trusted third parties only as necessary to provide our services:

  • Service Providers: Hosting (Vercel), email delivery (Resend), payment processing, and analytics tools. These providers are bound by data processing agreements.
  • Professional Advisors: Lawyers, accountants, and insurers where necessary for legal or business purposes.
  • Legal Compliance: If required by law, court order, or government regulation.

5. Data Retention

We retain your personal data only as long as necessary:

  • Contact form inquiries: 12 months after last communication.
  • Project/client data: 3 years after project completion or termination.
  • Billing records: 7 years (to comply with tax and accounting obligations).
  • Analytics data: 26 months (aggregated).

6. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your data, subject to legal retention obligations.
  • Portability: Request transfer of your data to another service provider.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at imranshiundu@gmail.com. We will respond within 30 days.

7. Cookies

Our website uses only essential cookies necessary for basic functionality, such as maintaining your session and theme preference (dark/light mode). We do not use tracking, advertising, or third-party marketing cookies. You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

8. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS/SSL) for all communications.
  • Secure, restricted access to stored data.
  • Regular security reviews and updates.
  • Data minimization — we only collect what we need.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any data breach affecting your information within 72 hours as required by law.

9. International Transfers

Your data may be processed on servers located outside Kenya (e.g., via Vercel, Resend, GitHub). Where we transfer data to jurisdictions with different data protection laws, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email or a prominent notice on our website.

12. Contact

If you have questions, concerns, or wish to exercise your data rights, contact our Data Protection Focal Person:

Imran Shiundu
Email: imranshiundu@gmail.com
Phone: +254 706 858 992
Location: Nairobi, Kenya
Contact Form