Last updated: 28 August 2026
1. Our commitment
AREACODEZERO treats personal information as a responsibility, not a commodity. We apply the principles of fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality to information we handle.
2. Kenyan data protection
Our processing is designed to comply with the Kenya Data Protection Act, 2019 and applicable regulations. We act as a data controller for information about our customers, prospects and website users. When we process information for a customer, the customer may be the controller and we may act as a processor under the relevant agreement.
3. GDPR applicability
The General Data Protection Regulation may apply where we process personal data of individuals in the European Economic Area or the United Kingdom in connection with offering services or monitoring behaviour. Where it applies, we respect GDPR rights and obligations in addition to local law. We do not claim that GDPR applies to every visitor or transaction.
4. Individual rights
Subject to applicable exemptions, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent where consent is the legal basis. Requests should be sent to [email protected]. We aim to respond within the period required by applicable law.
5. Processors and transfers
We select service providers with regard to security and reliability, document appropriate processing arrangements where required, and limit provider access to what is necessary. For transfers outside the originating jurisdiction, we use appropriate safeguards required by applicable law.
6. Breach response
We maintain procedures to identify, contain, investigate and remedy security incidents. Where a breach creates a legally reportable risk, we will notify the relevant authority and affected individuals when required.
7. Contact and complaints
Contact us with a data request or concern using our contact page. You may complain to the ODPC in Kenya or, where GDPR applies, to the supervisory authority in your country.