Privacy Policy

1. Who we are

Afrinex Solutions (“Afrinex”, “we”) is a Kenya-based provider of digital services, data services, software, AI, and automation. For personal data described in this policy, Afrinex acts as the data controller. TODO: review

TODO: review — add registered business name, physical/postal address, and Office of the Data Protection Commissioner (ODPC) registration number if registration applies.

2. Personal data we collect

When you send an enquiry

• Your name and the contact channel you choose (email address or WhatsApp number).
• The service you are interested in and the message you write.

When we provide a service

Some services, such as SHA, KRA, or eTIMS assistance, may require identification or tax details (for example an ID number or KRA PIN). We ask for this only after reviewing your request, only where it is needed for the agreed work, and we confirm a safe way to share it. Please do not send passwords or PINs in a first message. TODO: review

When you visit this website

The site stores your colour-theme choice in your browser's local storage. It does not use advertising cookies. TODO: review — update if analytics or hosting logs are added or retained.

3. How and why we use personal data

• To reply to your enquiry and discuss the scope, cost, and timeline of work.
• To perform the service you have agreed to, including submitting information to a government platform on your instruction.
• To keep basic records of work done and communications.
• To meet legal obligations.

4. Lawful basis for processing

Under the Data Protection Act, 2019, we rely on your consent, the need to take steps at your request before entering into an agreement or to perform an agreement with you, and compliance with legal obligations. TODO: review

TODO: review — confirm treatment of sensitive personal data and any additional conditions required.

5. Sharing personal data

We do not sell personal data. We share it only where needed to deliver the service, for example:

• Communication providers you choose to contact us through (WhatsApp, email).
• Government platforms (such as SHA, KRA, or eTIMS) when you instruct us to complete a process on your behalf.
• Authorities where required by law.

Afrinex Solutions is an independent service provider and is not affiliated with SHA or KRA.

6. Transfers outside Kenya

Email and messaging providers may store data on servers outside Kenya. TODO: review — describe safeguards relied on for cross-border transfers under the Act and its regulations.

7. How long we keep data

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. TODO: review — set specific retention periods (e.g. enquiries, completed-service records, identification documents).

8. How we protect data

We take reasonable steps to protect personal data against loss, misuse, and unauthorised access. TODO: review — describe the measures actually in place (who has access, how documents are stored, when sensitive files are deleted).

9. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be informed of how your personal data is used;
• access personal data we hold about you;
• object to processing of all or part of your personal data;
• have inaccurate or misleading data corrected;
• have false or misleading data deleted; and
• request data portability where applicable.

To exercise a right, contact us using the details below. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC). TODO: review — add response timeframe and ODPC contact details.

10. Children

Our services are intended for adults and businesses. TODO: review — confirm handling where a parent or guardian requests a service for a child.

11. Changes to this policy

We will update this page when our practices change and show the date of the latest version above.

12. Contact

Email [email protected] or message us on WhatsApp. See also our Terms of Service.