Legal
Privacy
What we collect, why we collect it, and how to make us delete it.
Last updated
Note: this document is written to be accurate and plain, but it has not yet been reviewed by a lawyer. It is not legal advice. If anything here matters to a decision you are making, check it with your own counsel — and tell us, because we would want to fix it.
Who we are
Bits Technologies Ltd (“Bits”, “we”, “us”) is the data controller for personal data collected through this website. Our contact details are on the contact page, and privacy questions can be sent to the same address with “Data protection” in the subject line.
We process personal data under the Kenya Data Protection Act 2019 and, where it applies to visitors in the European Economic Area or the United Kingdom, the GDPR.
What we collect, and why
Contact form: your name, email address, and anything else you choose to tell us — phone number, company, budget range, timeline and your message. We use it to reply to you and to prepare a proposal. The lawful basis is taking steps at your request before entering a contract.
AI audit: your answers to the quiz, plus the name, email and company you give us to receive the report. We use them to generate and send the report, and to understand which problems businesses are bringing us. The lawful basis is your consent, which you give by submitting the form.
Newsletter: your email address, used only to send the newsletter. The lawful basis is consent, and every email carries an unsubscribe link that works immediately.
Anti-spam and rate limiting: we store a one-way hash of your IP address, never the address itself, so we can stop abuse without keeping a record of who visited. The lawful basis is our legitimate interest in keeping the site usable.
Analytics: we use privacy-respecting, cookie-free analytics that counts visits without identifying individuals, building no profile and setting no tracking cookie.
What we do not do
We do not sell personal data. We do not share it with advertisers. We do not use it to train machine-learning models. We do not run behavioural advertising or embed third-party trackers.
Who else processes it
A small number of service providers process data on our behalf, under contract and on our instructions only: our hosting provider, our email delivery provider, our calendar booking provider and our bot-protection provider. Each one receives only what it needs to do its job.
Where a provider processes data outside Kenya or the EEA, we rely on appropriate safeguards, including standard contractual clauses.
How long we keep it
Enquiries and proposals: three years from our last contact, so we can pick up a conversation you return to, and because it is the period in which questions about a quotation tend to arise.
AI audit submissions: two years, after which they are deleted.
Newsletter subscriptions: until you unsubscribe, then we keep a record of the unsubscribe itself so we do not email you again by mistake.
Hashed IP records for rate limiting: thirty days.
We run deletion on a schedule rather than when someone remembers.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to our processing of it, or ask us to restrict processing. Where processing is based on consent, you can withdraw that consent at any time.
Email us and we will respond within thirty days. We will not charge you, and we will not make it difficult.
If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner in Kenya, or to your local supervisory authority in the EEA or UK.
Security
The site is served over HTTPS only. Data is encrypted in transit and at rest. Access to systems holding personal data is limited to people who need it, protected by multi-factor authentication, and logged.
If a breach occurs that is likely to result in a risk to your rights, we will notify the Data Protection Commissioner within 72 hours and tell affected individuals without undue delay.
Changes
If we change this notice materially we will update the date below and, where the change affects how we use data you have already given us, tell you directly.
Questions about this document? Email hello@bitstechnologies.co.ke.
Still want to work with us?.
Now that you have read the small print, the first conversation costs nothing and usually clarifies the problem whether or not you hire us.