Information we collect
We collect information that you provide directly, information generated automatically as you use our sites and services, and information from clients or partners who engage us to deliver a project on their behalf.
Information you provide
- Contact details — name, email address, phone number, and company name submitted through forms, email, or WhatsApp.
- Project information — briefs, content, credentials, or assets you share with us to build, host, or maintain a website, application, or system.
- Billing details — invoicing address and payment references for domains, hosting, and service contracts.
Information collected automatically
- Usage data — pages visited, referring URL, device type, browser, and approximate location derived from IP address.
- Hosting & server logs — for clients on our hosting infrastructure, standard access and error logs used for uptime, security, and support.
How we use it
We use personal information to deliver, secure, and improve the services you ask us for. Specifically, we use it to:
- Respond to enquiries and prepare proposals or quotations.
- Build, host, secure, and maintain websites, applications, and domains on your behalf.
- Process domain registrations and renewals with the relevant registrars.
- Send service notices — maintenance windows, renewal reminders, security alerts.
- Issue invoices and process payments for contracted work.
- Monitor, troubleshoot, and improve the reliability of our own websites and systems.
We do not sell personal information, and we do not use client project data — content, credentials, or assets held for hosting or development — for advertising purposes.
Legal basis
Where the Kenya Data Protection Act, 2019 or another applicable data protection law requires a legal basis for processing, we rely on one of the following:
| Basis | When it applies |
|---|---|
| Contract | Processing needed to deliver a service you’ve engaged us for, such as hosting or development. |
| Consent | Where you’ve opted in, such as subscribing to project or service updates. |
| Legitimate interest | Securing our infrastructure, preventing fraud, and improving our services. |
| Legal obligation | Retaining billing records or responding to a lawful request from an authority. |
Cookies & tracking
Our website uses a small number of cookies and similar technologies to keep the site working correctly and to understand how it’s used.
- Essential cookies — required for core site functionality, such as remembering menu state; these cannot be switched off.
- Analytics cookies — help us understand aggregate traffic and page performance so we can improve the site.
You can control or disable cookies through your browser settings at any time. Disabling non-essential cookies won’t affect your ability to browse the site.
How we share data
We share personal information only where necessary to run our business or deliver a service, and always under confidentiality obligations. This includes:
- Infrastructure & registrar partners — domain registrars, hosting and cloud providers we use to deliver services on your behalf.
- Professional advisors — accountants or legal counsel, where necessary and under confidentiality.
- Authorities — where disclosure is required to comply with a legal obligation or protect our rights.
We do not share client data with third parties for their own marketing purposes.
Data retention
We keep personal information only as long as needed for the purpose it was collected: for the length of an active contract, plus a reasonable period afterward for support continuity, accounting, and legal record-keeping. Server and access logs are retained on a rolling basis and cleared automatically. You can request earlier deletion — see Your rights.
Security
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including access controls on hosting environments, encrypted connections, and restricted internal access to client credentials and project assets. No system is completely secure, and we continuously review our practices as threats evolve.
Your rights
Subject to applicable law, you have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information, where we’re not required to retain it.
- Object to or restrict certain processing, including direct marketing.
- Request a portable copy of information you’ve provided to us.
- Lodge a complaint with Kenya’s Office of the Data Protection Commissioner (ODPC), or your local authority.
To exercise any of these rights, contact us using the details in Contact us. We’ll respond within a reasonable timeframe.
Children’s privacy
Our services are directed at businesses and individuals over the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will remove it.
International transfers
Some of the hosting, cloud, and email infrastructure we use may store or process data outside Kenya. Where this happens, we work with providers that maintain appropriate safeguards, and transfers are made in line with the requirements of the Kenya Data Protection Act, 2019.
Changes to this policy
We may update this policy from time to time to reflect changes in our services or legal requirements. Material changes will be reflected by an updated “Last updated” date at the top of this page. We encourage you to review this page periodically.
Contact us
If you have questions about this policy or how we handle your information, reach us at:
- Email: info@mail.iyisolutions.com
- Address: 3rd Floor, Nextgen Mall, Mombasa Road, P.O. Box 40022-00100, Nairobi