Privacy Policy

Your information, handled with care.

How we collect, use, and protect your personal data under the Kenya Data Protection Act, 2019.

Last updated: 24 October 2026

Permalink Business Ltd. (“Permalink”, “we”, “us”) respects your privacy. This policy explains how we collect, use, share, and protect personal data when you visit our website, contact us, or use our services, in line with the Kenya Data Protection Act, 2019 and its regulations.

1. Who we are

Permalink Business Ltd. is a digital solutions company based in Nairobi, Kenya. We are the data controller for personal data collected through this website and in the course of our business. Where we process data on behalf of clients (for example, within a system we host for them), we act as a data processor under our agreement with that client.

2. Data we collect

  • Information you give us: name, organisation, email address, phone number, and the details you share through contact forms, quote requests, the website cost calculator, WhatsApp, email, or phone.
  • Client and project information: billing details, KRA PIN where required, project content, and account credentials needed to deliver services.
  • Referral information: details of people you introduce through our Referral Programme.
  • Technical information: IP address, browser and device type, pages visited, and similar data collected through cookies and analytics tools.

3. How we use your data

  • To respond to enquiries and prepare quotes (steps taken at your request before a contract).
  • To deliver, support, and invoice the services you engage us for (performance of a contract).
  • To meet legal, tax, and accounting obligations (legal obligation).
  • To improve our website and services and keep them secure (legitimate interests).
  • To send news, insights, or offers, only where you have agreed or are an existing client; you can opt out at any time (consent / legitimate interests).

4. Cookies

We use essential cookies to make the website work and analytics cookies to understand how visitors use it. You can block or delete cookies through your browser settings; some features may not work as intended without them.

5. Sharing your data

We do not sell personal data. We share it only with trusted service providers who help us operate, such as hosting, email, analytics, and payment providers (including M-Pesa and banks), under appropriate confidentiality and security obligations; with professional advisers; or where required by law or a lawful request from authorities.

6. International transfers

Some of our providers store data outside Kenya. Where this happens, we take steps required under the Data Protection Act to ensure your data receives adequate protection.

7. How long we keep data

We keep personal data only as long as needed for the purposes above: enquiry data for up to 24 months if no engagement follows, and client and financial records for at least 7 years as required for tax and accounting purposes. Data is then securely deleted or anonymised.

8. Security

We use appropriate technical and organisational measures, including encrypted connections, access controls, strong passwords, regular backups, and staff confidentiality obligations, to protect personal data against loss, misuse, and unauthorised access.

9. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be informed about how your data is used;
  • access the personal data we hold about you;
  • object to processing, including direct marketing;
  • request correction of inaccurate data or deletion of data that is no longer needed;
  • request data portability where applicable; and
  • withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us using the details below. We will respond within the time required by law. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.

10. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children without parental consent.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its “last updated” date.

12. Contact us

Permalink Business Ltd., Nairobi, Kenya
Email: info@permalinkbusiness.com
Phone / WhatsApp: +254 706 143 654

Join free AI Training for WebsitesChat with us