Privacy Policy
Boresha Limited
Last updated: Jan 1 2026
Boresha Limited (“we”, “our”, “us”) is committed to protecting the privacy, confidentiality, and security of personal data entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information obtained through our website submission forms and related digital channels, in compliance with the Kenya Data Protection Act, 2019 and applicable regulations issued by the Office of the Data Protection Commissioner (ODPC).
This policy applies to all visitors to our website, prospective clients, partners, and any individuals who submit personal data to Boresha Limited through online forms, email communication, or related digital interactions.
1. Definitions
For purposes of this Privacy Policy:
- “Personal Data” means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, and company details.
- “Data Subject” means any individual whose personal data is collected and processed by Boresha Limited.
- “Processing” includes collection, recording, storage, use, disclosure, transmission, or deletion of personal data.
- “Website” refers to any website, landing page, or digital property owned or operated by Boresha Limited.
2. Information We Collect
When you submit a form on our website or otherwise engage with us digitally, we may collect the following categories of personal data:
- Full name
- Email address
- Phone number
- Company or organisation name
- Job title or role (where provided)
- Message content or enquiry details
- Technical information such as IP address, browser type, or device information (where collected via analytics tools)
We only collect personal data that is relevant, adequate, and limited to what is necessary for legitimate business and operational purposes.
3. How We Collect Information
We collect personal data through:
- Website contact forms and lead generation forms
- Direct email correspondence
- Online booking or consultation request forms
- Cookies and basic analytics tools (where applicable)
All data is collected transparently and, where required, with your explicit consent.
4. Purpose of Data Collection and Use
We use personal data for the following purposes:
- Responding to enquiries, requests, or communications
- Providing information about our services and offerings
- Evaluating potential client engagements and business opportunities
- Scheduling consultations or follow-up discussions
- Improving our website, services, and user experience
- Maintaining internal records related to client and prospect engagement
- Ensuring website security and preventing misuse
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.
5. Legal Basis for Processing
We process personal data based on one or more of the following lawful bases:
- Consent: Where you voluntarily submit information through our website forms
- Legitimate Interests: Where processing is necessary for responding to enquiries, providing services, or operating our business
- Legal Obligations: Where processing is required to comply with applicable laws or regulations
You may withdraw your consent at any time by contacting us using the details provided in this policy.
6. Data Storage and Security Measures
Boresha Limited implements reasonable technical and organisational safeguards to protect personal data against:
- Unauthorised access
- Accidental or unlawful destruction
- Loss, alteration, or disclosure
- Misuse or unauthorised processing
Security measures may include access controls, password protection, encryption where appropriate, and restricted access to personal data on a need-to-know basis.
7. Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, including legal, accounting, or reporting requirements.
Retention periods are determined based on:
- The nature and sensitivity of the personal data
- The purposes for which it is processed
- Applicable legal or regulatory requirements
Once data is no longer required, it is securely deleted or anonymised.
8. Sharing and Disclosure of Personal Data
We do not sell, rent, or trade personal data. However, we may share personal data in the following limited circumstances:
- With trusted third-party service providers who support our website operations, communications, or business processes, under strict confidentiality obligations
- Where required by law, regulation, court order, or lawful request by public authorities
- To protect our legal rights, property, or safety, or that of others
All third parties are required to process personal data in accordance with applicable data protection laws.
9. Cross-Border Data Transfers
Where personal data is transferred outside Kenya, Boresha Limited ensures that:
- Appropriate safeguards are in place
- The receiving party complies with data protection standards equivalent to those under the Kenya Data Protection Act
- Transfers are conducted in accordance with guidance issued by the ODPC
10. Cookies and Analytics
Our website may use cookies and basic analytics tools to:
- Understand website usage and performance
- Improve functionality and user experience
- Maintain website security
Cookies do not collect personally identifiable information unless you voluntarily provide such information. You may control cookie preferences through your browser settings.
11. Your Rights as a Data Subject
Under the Kenya Data Protection Act, 2019, you have the right to:
- Be informed about the collection and use of your personal data
- Access personal data held about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data
- Object to or restrict processing in certain circumstances
- Withdraw consent at any time without affecting prior lawful processing
To exercise these rights, please contact us using the details below.
12. Children’s Data
Our services and website are not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. Complaints and Regulatory Authority
If you have concerns about how your personal data is handled, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
We encourage you to contact us first so we can address your concerns promptly.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or operational needs. Any updates will be posted on this page with a revised “Last updated” date.
Continued use of our website after changes are published constitutes acceptance of the updated policy.
15. Contact Information
If you have questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact:
Boresha Limited
📧 Email: hello@boresha.io
📍 Kenya
By submitting information through our website forms, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data in accordance with its terms.
