Privacy Policy

Effective date: 11 August 2026 · Last updated: 11 August 2026

1. PURPOSE

GoTech Solutions respects your privacy and is committed to protecting personal data handled through this website and our related communications.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, when we share it, how we protect it, how long we retain it, and how you may exercise your rights.

This policy is intended to support compliance with applicable Kenyan data protection requirements, including the Data Protection Act, 2019 and applicable regulations, as well as privacy disclosure requirements relevant to Google services if such services are used on the website.

2. WHO WE ARE

GoTech Solutions is a Nairobi-based consulting and digital services business providing services including grant proposal writing, business plan writing, marketing copywriting, data analysis and modelling, web development and UI/UX design, graphic design, and field data collection.

For personal data processed through this website, GoTech Solutions generally acts as the data controller for information submitted through the website contact form and direct enquiries, subject to the circumstances of the particular engagement.

3. PERSONAL DATA WE COLLECT

When you submit an enquiry through our contact form, we collect the information you choose to provide, including:

  • Name.
  • Email address.
  • Phone number.
  • Service requested.
  • Message or project information.
  • The date and source of the enquiry.

You may also provide personal data when you contact us by email, telephone, WhatsApp, or another communication channel.

We do not ask website visitors to submit sensitive personal data through the general contact form. Please do not include passwords, financial account credentials, national identification numbers, health information, or other sensitive information in a general enquiry unless we specifically request it and provide an appropriate reason and method for collection.

Technical information may also be processed by our hosting provider, security services, or third-party resources used by the website. Depending on the services enabled, this may include IP address, browser type, device information, referring pages, approximate location derived from IP address, access times, and security or diagnostic logs.

4. HOW WE COLLECT DATA

We collect personal data directly from you when you:

  • Submit the contact form.
  • Email us.
  • Call or message us.
  • Contact us through WhatsApp.
  • Provide information during project scoping, delivery, review, or support.

Our website currently uses a contact form. The form validates the name, email, phone number, requested service, and message before attempting submission.

Where a Google Apps Script web endpoint is configured, the enquiry data may be transmitted to that endpoint and recorded in a Google Sheet used to manage enquiries. Where no such endpoint is configured, the website uses an email draft as its fallback method.

5. WHY WE USE PERSONAL DATA

We use personal data for purposes such as:

  • Responding to enquiries.
  • Assessing project requirements.
  • Preparing quotations or proposals.
  • Communicating about requested services.
  • Delivering contracted services.
  • Managing project records and client communications.
  • Following up on enquiries.
  • Maintaining business, accounting, legal, security, and compliance records.
  • Preventing fraud, abuse, spam, and security incidents.
  • Improving website operation and service delivery.
  • Responding to lawful requests from authorities where required.
  • We do not sell personal data.

6. LAWFUL BASIS FOR PROCESSING

We process personal data using a lawful basis recognised under applicable Kenyan data protection law. Depending on the circumstances, this may include:

  • Your consent.
  • Taking steps at your request before entering into a contract.
  • Performing a contract.
  • Complying with a legal obligation.
  • Protecting vital interests.

A legitimate interest where permitted by law and where that interest does not override your rights and freedoms.

  • Research or statistical purposes where the applicable legal requirements are met.

Where consent is the legal basis, you have the right to withdraw consent. Withdrawal does not affect processing carried out before withdrawal.

7. CONTACT FORM AND ENQUIRY RECORDS

The contact form requests your name, phone number, email address, selected service, and message.

The website also records the submission date and identifies the source as Website when an enquiry is sent through the configured backend.

Enquiry records may be stored in a business record system, including Google Sheets if the Google Apps Script option is enabled.

We use enquiry information to respond to you and manage potential or existing client relationships.

8. GOOGLE SERVICES AND THIRD-PARTY TECHNOLOGIES

The website uses Google Fonts. Loading Google Fonts may involve your browser communicating with Google's servers and transmitting technical information such as your IP address and browser-related information.

The contact page also uses QRCode.js delivered through cdnjs. This third-party resource may process technical request information according to its own policies.

If Google Apps Script and Google Sheets are enabled for the contact form, enquiry information will be processed through those Google services for lead and enquiry management.

If Google Analytics, Google Ads, Google Tag Manager, AdSense, reCAPTCHA, or another Google service is added later, this Privacy Policy will be updated before or when the service is deployed, as appropriate. Any required cookie, consent, advertising, analytics, or data-use disclosures will be provided.

Where Google advertising or publisher products are used, users should also review Google's explanation of how Google uses information from sites and apps that use its services:

https://policies.google.com/technologies/partner-sites

Google publisher policies require publishers using Google products to clearly disclose data collection, sharing, and usage connected with Google products, including technologies such as cookies, web beacons, IP addresses, and other identifiers.

9. COOKIES AND SIMILAR TECHNOLOGIES

The current website does not intentionally use a dedicated advertising cookie system.

Third-party services, hosting infrastructure, embedded resources, security tools, analytics tools, advertising services, or other technologies introduced in the future may use cookies, local storage, pixels, web beacons, or similar technologies.

Where such technologies are used, we will disclose their purpose and provide any consent or control required by applicable law.

You may also control cookies through your browser settings. Blocking some cookies or similar technologies may affect website functionality.

10. DATA SHARING

We may share personal data with service providers where reasonably necessary to operate the business or provide requested services. Examples include:

  • Website hosting and infrastructure providers.
  • Email providers.
  • Google services such as Google Apps Script and Google Sheets if enabled.
  • Communication platforms such as WhatsApp when you choose to contact us through WhatsApp.
  • Professional advisers, where necessary and lawful.

Government agencies, regulators, courts, law enforcement bodies, or other authorities where disclosure is required or permitted by law.

  • We require appropriate safeguards from service providers where applicable.
  • We do not sell or rent personal data to third parties.

11. INTERNATIONAL DATA TRANSFERS

Some technology providers used by the website or business may process personal data outside Kenya.

Where personal data is transferred outside Kenya, GoTech Solutions will apply the safeguards and legal requirements required under applicable Kenyan data protection law, including requirements concerning adequate safeguards, appropriate contractual protections, consent where required, or another lawful transfer mechanism.

12. DATA SECURITY

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved.

Measures may include access controls, secure account management, HTTPS/TLS where supported, limited access to enquiry records, password protection, secure service-provider configurations, and procedures for responding to suspected security incidents.

No internet transmission or storage system is guaranteed to be completely secure. You should avoid sending confidential credentials or unnecessary sensitive information through ordinary website forms, email, or messaging channels.

13. PERSONAL DATA BREACHES

GoTech Solutions maintains procedures for identifying, containing, investigating, documenting, and responding to personal data breaches.

Where a personal data breach meets the applicable legal threshold, GoTech Solutions will notify the Office of the Data Protection Commissioner within the period required by Kenyan law. Under the Data Protection Act, a qualifying notification to the Data Commissioner is generally required within seventy-two hours after becoming aware of the breach.

Where GoTech Solutions acts as a data processor and becomes aware of a personal data breach, it will notify the relevant data controller without delay and, where reasonably practicable, within forty-eight hours, subject to applicable law.

Where a breach presents a real risk of harm to affected data subjects, GoTech Solutions will communicate with affected individuals as required by law. Such communication will provide relevant information about the nature of the breach, steps taken or planned to address it, recommended protective measures, and an appropriate contact point where required.

14. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, providing services, maintaining business records, resolving disputes, meeting legal or accounting obligations, and protecting legitimate business interests.

Retention periods may differ depending on the type of record and the nature of the engagement.

When personal data is no longer required, we will delete it, anonymise it, or securely dispose of it where reasonably practicable and subject to legal retention requirements.

15. YOUR RIGHTS

Subject to applicable law and lawful limitations, you have rights including:

  • The right to be informed about the use of your personal data.
  • The right to access personal data held about you.
  • The right to object to certain processing.
  • The right to request correction of inaccurate or misleading personal data.
  • The right to request deletion or erasure where the legal requirements are met.
  • The right to request restriction of processing where the legal requirements are met.
  • The right to withdraw consent where processing relies on consent.
  • The right to request data portability where applicable.
  • The right to lodge a complaint with the Office of the Data Protection Commissioner.

To exercise a right, contact us using the details in section 20. We may request reasonable information needed to verify your identity before responding.

16. DIRECT MARKETING

We do not use enquiry information for unrelated direct marketing without a lawful basis.

Where direct marketing requires consent or an opt-out mechanism under applicable law, we will provide the appropriate choice.

  • You may ask us to stop receiving direct marketing communications at any time.

17. CHILDREN

Our website is intended for general audiences and is not designed to knowingly collect personal data from children for advertising or unrelated commercial profiling.

If a child or another person submits personal information in circumstances where collection is not appropriate, a parent, guardian, or authorised person may contact us to request review or deletion, subject to applicable law.

18. THIRD-PARTY WEBSITES

The website contains links to third-party services, including WhatsApp and external resources.

When you follow a third-party link, the third party's own privacy policy and terms apply. GoTech Solutions does not control the privacy practices of third-party platforms.

19. ACCURACY OF INFORMATION

We take reasonable steps to keep personal data accurate and up to date where required.

If information you provided changes or you believe information we hold is inaccurate, contact us so we may review and correct it where appropriate.

20. PRIVACY REQUESTS AND CONTACT

For privacy questions, access requests, correction requests, deletion requests, objections, or security concerns, contact:

GoTech Solutions

Nairobi, Kenya

Email: gotechsolutions2@gmail.com

Phone/WhatsApp: +254 707 490 519

Please include enough information for us to understand your request. We will handle requests within the time and manner required by applicable law.

You may also contact the Office of the Data Protection Commissioner where you wish to make a regulatory complaint.

21. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our services, technology, legal requirements, or data practices change.

The latest version will be published on this website with the effective date shown at the beginning of the policy.

22. IMPORTANT LIMITATION

This Privacy Policy is designed for the website and data practices described in the website materials provided to us. It does not replace a formal legal compliance assessment.

Before launch of advertising, analytics, payment processing, user accounts, newsletters, online booking, client portals, or other data-intensive features, the policy and website consent mechanisms should be reviewed and updated to match the actual implementation.

LEGAL REFERENCES

Kenya Data Protection Act, 2019.

  • Kenya Data Protection (General) Regulations, 2021.
  • Kenya Consumer Protection Act, 2012, where applicable.
  • Applicable Google publisher and privacy requirements where Google publisher products are used.

This policy was prepared for GoTech Solutions based on the website configuration and services described in the supplied website files.