Privacy policy

ENKOP (“ENKOP”, “we”, “us” or “our”) is committed to protecting your privacy. This policy explains what personal information we collect when you use our website at enkop.africa, how we use it, who processes it for us, how long we keep it, and the rights you have over it.

Who we are

ENKOP is responsible for the personal information described here. Our office is at The Kaya, Olenguruone Rd, Lavington, Nairobi, Kenya, and you can reach us at info@enkop.africa.

What we collect

We only collect personal information that you choose to give us, and the minimum technical information needed to run the website safely.

When you use a contact form

Your name, your email address, and the content of your message. On the contact page you may also give the organisation you represent and an area of interest. We record which form you used and when your message arrived.

When you send a form

Your IP address, used to count submissions from one connection so we can limit automated abuse. It is held for no more than an hour.

When you visit any page

Our hosting provider records requests to the website, including IP addresses, in server logs used to operate and secure the site.

You do not need an account to use this website, and we do not knowingly collect information from anyone under the age of 18.

How we use it

We use the information you provide to:

• Respond to your enquiry, partnership proposal or request for advisory support
• Communicate with you about ENKOP’s work where it is relevant to your enquiry
• Keep a record of our correspondence for operational and legal purposes
• Protect the website and its forms from abuse

We will never sell your personal information, and we will not use it for unrelated marketing without your consent.

Legal basis

We process your personal information on the basis of your consent, which you give when you send a form, and our legitimate interest in responding to enquiries, operating our business and keeping the website secure. Where required, we process information to comply with our legal obligations, including under Kenya’s Data Protection Act, 2019.

Service providers

We use a small number of service providers to run the website. They process personal information on our behalf, under our instructions, and are bound to protect it. We do not share your information with anyone else except where the law requires it.

Vercel

Hosts the website and runs the programs that receive our forms. Keeps server logs of requests to the site.

Upstash

A database that holds two things: a copy of every enquiry sent through our contact forms, kept for 30 days so that no message is lost if email delivery fails, then deleted automatically; and hourly counters of form submissions per IP address, deleted within an hour.

Resend

Delivers enquiries from our contact forms to our inbox.

Our email provider

Hosts the inbox where enquiries arrive and where we correspond with you.

Processing outside Kenya

Our service providers operate internationally, and your information may be processed outside Kenya, including in the United States and the European Union. Where it is, we rely on the providers’ contractual commitments and safeguards to protect it to a standard consistent with Kenyan law.

Cookies and browser storage

This website does not set advertising or tracking cookies and uses no analytics. Its fonts are served from our own site, not from a third party. One small note is kept in your browser’s session storage so that the map on the homepage animates only once per visit; it holds no personal information and is cleared when you close the tab. If we introduce analytics in the future, this policy will be updated and, where required, your consent will be asked for first.

How long we keep it

• The copy of each enquiry held in our database: 30 days, then deleted automatically
• Our correspondence with you: only as long as needed to deal with your enquiry and meet our operational and legal requirements, then securely deleted
• Submission counters linked to an IP address: up to one hour
• Server logs: for the period our hosting provider keeps them

Security

We apply reasonable organisational and technical measures to protect personal information against loss, misuse and unauthorised access. Information travels to and from the website encrypted, and the keys to our service providers are held only in our hosting configuration. No method of transmission over the internet is entirely secure, however, and we cannot guarantee absolute security.

Your rights

Subject to applicable law, you have the right to be informed about how we use your personal information, to ask for access to it, to have it corrected or deleted, to object to or restrict its processing, and to withdraw your consent at any time. To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you may complain to Kenya’s Office of the Data Protection Commissioner.

Links to other sites

Our website links to external sites, including LinkedIn, where our articles are published in full, and the websites of partner organisations. We are not responsible for the privacy practices or content of those sites and encourage you to review their policies.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.

Contact us

For any questions about this policy or your personal information, contact us at info@enkop.africa or write to us at The Kaya, Olenguruone Rd, Lavington, Nairobi, Kenya.