Privacy Policy

Data controller: Due Connect Solutions Limited, trading as Due Connect Solutions, Nairobi, Kenya. This notice describes the static website implementation in this repository. The public domain was observed serving a separate WordPress site; its data collection and providers have not been verified by this notice.

1. Overview and scope

We respect your privacy under Article 31 of the Constitution of Kenya, the Data Protection Act, No. 24 of 2019 (the DPA), and the Data Protection (General) Regulations, 2021, as applicable. This notice explains the information handled through this static website and how to exercise your rights. It does not cover a third-party website you visit through a link.

2. Information we collect

• Information you give us: If you contact us by email or telephone, we receive the contact details and message you choose to provide. The enquiry form in this website version is disabled and has no submission service.
• Usage and device information: The web host may process your IP address, browser and device details, requested page, time, and referral information in server logs to deliver and protect the site. The production host and its log settings are not established by this repository.
• Accounts and transactions: This website version has no account, payment, or checkout feature. It does not collect account credentials or payment-card or transaction data.
• Necessary, Analytics, and Marketing preferences: This website stores your category choices in local browser storage for up to 180 days so it can remember your selection. Necessary storage records your preference. Analytics and Marketing are optional and default off. No analytics or marketing provider is configured in this version, so no optional telemetry or advertising request is sent.

3. Why we use information

Section 30 of the DPA requires a lawful basis for each purpose. In this website version:

• We use contact details you send us to respond to your request or take steps you ask us to take before a possible contract.
• A web host may process request and device information to deliver the site and protect it from misuse, based on legitimate interests balanced against your rights; we also process information where necessary to meet a legal obligation.
• The browser preference records your Necessary, Analytics, and Marketing selections so the site can respect them. Analytics and Marketing require separate explicit consent and neither category is active in this website version.
• We rely on another basis under section 30, such as vital interests or a public interest task, only where that basis actually applies to the specific processing.

4. How we share information

We do not sell personal data. We share it only when necessary with authorized personnel, the web-hosting or communications providers needed to operate the service, or a public authority where Kenyan law requires or permits disclosure. A provider must be subject to appropriate confidentiality and data-protection safeguards. This website version does not use an enquiry-form processor, payment processor, or analytics provider. A provider used by the separate WordPress site is not identified here.

5. Transfers outside Kenya

We will transfer personal data outside Kenya only in accordance with sections 48 and 49 of the DPA and applicable Regulations. Before a transfer, we will establish a lawful transfer condition and appropriate safeguards, such as an adequate level of protection or enforceable contractual and organizational protections. Sensitive personal data is subject to the additional statutory transfer conditions. We do not intentionally collect sensitive personal data through this website.

6. Security and retention

We use reasonable technical and organizational safeguards appropriate to the risk and required by the DPA and applicable Regulations, including limiting access to authorized people and using secure transport where available. No internet transmission or storage system can be guaranteed absolutely secure. We keep information only as long as needed for the purpose collected, a legal obligation, or the establishment or defence of a legal claim, then securely delete or anonymize it. The browser preference expires after 180 days; hosting-log retention is determined by the hosting provider.

If a personal-data breach occurs, we will assess and respond under section 43 of the DPA and the applicable Regulations. Where the statutory threshold is met, we will notify the ODPC without delay and, where reasonably practicable, within 72 hours after becoming aware of the breach; we will notify affected people where required by law.

7. Your rights and requests

The DPA, including section 26, gives you rights concerning your personal data. Subject to applicable legal conditions, you may ask us to:

• Be informed about how your personal data is used and access it.
• Correct inaccurate or incomplete personal data.
• Delete personal data that is no longer lawfully required.
• Object to processing or request restriction where the law provides.
• Receive or transfer eligible data in a structured, commonly used format.
• Withdraw consent where processing relies on consent.

Send a request to info@dueconnect.co.ke with “Privacy request” in the subject. Tell us what right you are exercising and how we can identify the information. We may ask for proportionate proof of identity; do not email passwords, payment details, or identity documents unless we first provide a secure method. We will respond within the period required by law. You may also complain to the ODPC if you believe your rights have been infringed.

8. International rights

Where the EU GDPR, UK GDPR, or UK Data Protection Act 2018 applies, you may also have rights to restrict or object to processing, data portability, and to complain to your supervisory authority. Where California's CCPA/CPRA applies, California residents may have rights to know, access, correct, and delete information, opt out of sale or sharing, and receive equal service. We do not sell personal data. You can change or withdraw optional category consent at any time using “Privacy preferences” on this website.

9. Regulatory oversight and contact

You may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Nairobi, Kenya, at complaints@odpc.go.ke or through www.odpc.go.ke .

Due Connect Solutions Limited
Trading as Due Connect Solutions
Nairobi, Kenya
Email: info@dueconnect.co.ke
Telephone: 0736086899 / 0715038125

Effective date: 7 October 2026