Privacy Policy

1. Who We Are

Azarous Technologies Ltd. ("Azarous", "we", "us", or "our") is a fully incorporated limited company registered in Kenya, providing software engineering, cloud infrastructure, IT consulting, cybersecurity, and managed IT services to clients across Kenya, East Africa, and globally.

Our registered address is: The Oval, Nairobi, Kenya.

This Privacy Policy applies to all personal data collected through our website (azarous.co.ke), digital platforms, inquiry forms, and service engagements.

2. What Personal Data We Collect

We collect personal data through direct interactions, automated technologies, and third-party sources.

• •Contact and Inquiry Data: Your name, work email address, phone number, company name, and project details submitted via our contact forms, cost estimator wizards, or direct email.
• •Demographic Data: Country of residence, preferred language, and industry sector, used to tailor our service proposals to your context.
• •Website Usage Data: IP address, browser type, device information, pages visited, session duration, and referral sources, collected automatically via analytics tools (PostHog, HubSpot) and server logs.
• •Client Project Data: Technical specifications, system architectures, source code repositories, and credentials shared during active service engagements, governed strictly under mutual Non-Disclosure Agreements (NDAs).
• •Communication Records: Emails, meeting notes, and call records relating to project discussions or support requests.

We do not request or store payment card details, national identity numbers, or sensitive personal data through our website. Please do not share such information via web forms.

3. Why We Collect Personal Data

We process your personal data only for legitimate, specified purposes:

• •Service Delivery: To evaluate project scopes, prepare technical proposals, execute service agreements, and deliver software engineering and consulting services.
• •Communication: To respond to inquiries, send project updates, and maintain ongoing client relationships.
• •Website Analytics: To understand how visitors interact with our website, identify technical issues, and improve user experience.
• •Marketing and Outreach: To send relevant service updates or industry insights where you have provided consent or where we have a legitimate interest. You may opt out at any time.
• •Legal and Regulatory Compliance: To meet our obligations under applicable Kenyan law, the Kenya Data Protection Act 2019, the EU General Data Protection Regulation (GDPR), and relevant international standards.

4. How We Share Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share data in limited circumstances:

• •Service Partners: Trusted technology partners and subcontractors engaged to deliver specific components of a project, bound by confidentiality obligations.
• •Cloud and Infrastructure Providers: Platforms such as AWS, Microsoft Azure, Vercel, and HubSpot that process data on our behalf under data processing agreements.
• •Legal Authorities: Where required by law, court order, or regulatory authority in Kenya or applicable jurisdictions.
• •Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity under the same privacy obligations.

5. Your Data Rights

Under the Kenya Data Protection Act 2019 and the GDPR (where applicable), you have the following rights regarding your personal data:

• •Right of Access: Request a copy of the personal data we hold about you.
• •Right to Rectification: Request correction of inaccurate or incomplete data.
• •Right to Erasure: Request deletion of your personal data where we no longer have a lawful basis to retain it.
• •Right to Object: Object to processing of your data for marketing purposes at any time.
• •Right to Data Portability: Receive your data in a structured, machine-readable format.
• •Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@azarous.co.ke. We will respond within 30 days.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve functionality and understand visitor behavior.

We use analytics cookies (PostHog) to track page views, sessions, and navigation paths. We use marketing cookies (HubSpot) to track form submissions and contact activity. We do not use advertising or third-party retargeting cookies.

You may control cookie preferences through your browser settings. Disabling cookies may affect certain website functionality.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure:

• •Encryption: Data in transit is protected using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
• •Access Controls: Access to client data is restricted to authorized personnel on a strict least-privilege basis.
• •Infrastructure Security: Our systems are hosted on secure cloud platforms with regular security monitoring and patching.
• •NDA Protocols: All team members and subcontractors with access to client data operate under signed confidentiality agreements.

No method of electronic transmission or storage is completely secure. While we take all reasonable measures, we cannot guarantee absolute security.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• •Inquiry and Contact Data: Retained for up to 2 years from the date of last contact, unless a service engagement follows.
• •Client Project Data: Retained for the duration of the engagement and up to 5 years thereafter, in line with statutory requirements and NDA obligations.
• •Website Analytics Data: Aggregated analytics data is retained for up to 24 months.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The updated version will be posted on this page with a revised "Last Updated" date.

For material changes that significantly affect how we process your data, we will notify you directly where we hold your contact information.

10. Contact Our Data Protection Team

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: