Last updated: 21 October 2026
This policy explains what personal information KaziBora Digital collects through kaziboradigital.com, why we collect it, who we share it with and the choices you have. We handle personal data in line with the Kenya Data Protection Act, 2019.
1. Who we are
KaziBora Digital (“KaziBora”, “we”, “us”) is a web design and digital marketing business based in Nairobi, Kenya. KaziBora Digital is the trading name of KaziBora Digital Ltd, a company registered in Kenya (registration number PVT-KW1927RW). We are the data controller for the information described here.
For any privacy question or request, email [email protected].
2. What we collect
| When | What we collect |
|---|---|
| You fill in a contact, quote or website audit form | Your name, email, phone number, business name, website address and your message |
| You message us on WhatsApp | Your name and number as they appear on WhatsApp, and the conversation |
| You run the free Business Visibility Check | Your business name, what you offer, your area, your website address, your answers to 7 short questions, and your IP address (used only to limit how many checks can be run). |
| You unlock your full report, or buy a Full Report Pass | Your name and WhatsApp number, and your email if you give it, to unlock the full report. For the Full Report Pass: the M-Pesa confirmation message you paste, which shows the transaction code, amount, date and time. We never see your M-Pesa PIN. If you ask for a tax invoice, your KRA PIN. |
| You keep using your report | Your report, score history and any whole-website scans, so you can reopen them with your personal report link and check again |
| You browse the site | Technical data such as your browser, device, pages visited and approximate location, through cookies and Google Analytics (see section 7) |
The Business Visibility Check only opens pages that are publicly available on the internet. It does not log in to websites or collect personal data from the pages it checks.
3. Why we use it
- To reply to your enquiry and give you a quote or audit (because you asked us to)
- To process your payment, send your receipt and give you access to your pass (to carry out our agreement with you)
- To follow up with you on WhatsApp about your report, which you agree to when you unlock it
- To issue a tax invoice when you give us a KRA PIN, and to keep financial records (because the law requires it)
- To prevent abuse of the free tool, such as automated or excessive use (our legitimate interest in keeping the service available)
- To understand how people use our website and improve it (our legitimate interest; you can block analytics cookies)
- To send you marketing emails, only if you have agreed to receive them. You can unsubscribe at any time.
We do not sell your personal data.
4. Who we share it with
We share personal data only with service providers who help us run the website and business, and only as much as they need:
| Provider | What they do for us |
|---|---|
| Paystack | Processes card and M-Pesa checkout payments, when that option is offered |
| Brevo | Sends emails from our website, such as receipts and sign-in links |
| Zoho Mail | Hosts our business email inboxes |
| Cloudflare | Protects and speeds up our website |
| Hostinger | Hosts our website and its database |
| Google (Analytics) | Measures how visitors use the website |
| WhatsApp (Meta) | Carries WhatsApp conversations with us |
We may also share information where the law requires it, for example with the Kenya Revenue Authority or a court.
5. Data stored outside Kenya
Some of these providers store data outside Kenya, including in the European Union, the United States and Nigeria. We use established providers that protect personal data with security measures and contractual safeguards, as the Data Protection Act requires for transfers outside Kenya.
6. How long we keep it
| Information | How long |
|---|---|
| Visibility Check reports and leads | Up to 2 years after your last check, unless you ask us to delete them sooner |
| Checks you do not unlock | 3 hours, then deleted automatically |
| Pass purchases, receipts and invoice details | 5 years, as Kenyan tax law requires for financial records |
| Enquiries and project communication | As long as we are working together, and up to 2 years after |
| Analytics data | 14 months, the period set in Google Analytics |
7. Cookies
Cookies are small files your browser stores. We use:
| Cookie | Purpose | How long |
|---|---|---|
| Saved report link (browser storage) | Lets this browser reopen your Visibility Check report | Until you clear your browser data |
| Google Analytics (_ga and similar) | Counts visits and shows how the site is used | Up to 2 years |
| Cloudflare and Wordfence security cookies | Protect the site from attacks and bots | Short-lived |
You can block or delete cookies in your browser settings. Your personal report link opens your report on any device, even if you clear your browser.
8. Your rights
Under the Data Protection Act you can ask us to:
- tell you what personal data we hold about you and give you a copy
- correct data that is wrong or incomplete
- delete your data, unless we must keep it by law (for example payment records)
- stop using your data for marketing, or object to other uses
- move your data to another provider in a common format
Email [email protected] and we will reply within 30 days. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
9. Security
We use HTTPS encryption, a website firewall, two-factor login for our administrators and limited staff access. Your personal report link works like a password: anyone with it can open your report and use your pass. No system is perfectly secure, so please keep the link private and tell us straight away if you think it has been misused.
10. Children
Our services are for businesses and adults. We do not knowingly collect data from children under 18.
11. Changes
We may update this policy. The date at the top shows the latest version; important changes will be shown on this page.