Privacy Policy | OSOMEC Global Tech

1. Introduction

OSOMEC Global Tech ("we", "our", "us") is committed to protecting your personal data and your right to privacy. This privacy policy explains how we collect, use, and share your personal data in compliance with the Kenya Data Protection Act (DPA) 2019, the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

2. Data We Collect

Information you provide:

Name, email, phone number, and company when you use our contact form
Email address when you subscribe to our newsletter
Communication content when you email or message us

Information we collect automatically:

IP address, browser type, and device information
Pages visited, time spent, and referral source (via privacy-friendly analytics)
Cookies and similar technologies (see Section 5 below)

3. How We Use Your Data

To respond to your inquiries and provide requested services
To send you our newsletter (only if you subscribe)
To improve our website and services based on usage analytics
To comply with legal obligations
To prevent fraud and abuse of our services

We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

Consent: You explicitly consent to data collection via our forms and cookie banner
Contract: Processing is necessary to provide services you've requested
Legitimate interest: Analytics to improve our services (with appropriate safeguards)
Legal obligation: Compliance with applicable laws and regulations

5. Cookies

We use the following types of cookies:

Essential cookies: Required for the website to function (not optional)
Analytics cookies: Help us understand how visitors use our site (optional — you can decline)

We do not use advertising or tracking cookies. Our cookie consent banner allows you to accept or decline non-essential cookies. Your preference is stored in your browser's local storage.

6. Data Retention

We retain personal data only as long as necessary:

Contact form submissions: 2 years after last interaction
Newsletter subscriptions: Until you unsubscribe
Analytics data: Aggregated and anonymized after 14 months
Server logs: 30 days

7. Your Rights

Under the DPA and GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Request we limit processing of your data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdrawal of consent: Withdraw consent at any time

To exercise these rights, email us at help@osomecglobaltech.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption in transit (HTTPS/TLS) and at rest
Access controls and authentication
Regular security assessments
Staff training on data protection

9. Data Breach Notification

In the event of a personal data breach, we will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours and affected individuals without undue delay, in accordance with the DPA.

10. Third-Party Services

We use the following third-party services that may process your data:

Hosting: Vercel (website hosting and deployment)
Analytics: Plausible (privacy-friendly, GDPR-compliant analytics)
Email: Resend (transactional email delivery)
DNS/Security: Cloudflare (DNS management and security)

11. International Data Transfers

Your data may be processed by our third-party service providers outside Kenya. We ensure these providers offer adequate data protection safeguards in compliance with the DPA and GDPR.

12. Contact

For any privacy-related questions, data requests, or to exercise your rights, contact us:

Email: help@osomecglobaltech.com
Address: Nairobi, Kenya

13. Updates to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date above.