Privacy Policy

1. Data Controller

Kingdo Msteps Ea
Riverside Drive 42, Westlands, Nairobi, 00600
Email: [email protected]
Tel: +254 20 445 9028

2. Legal Framework

The processing of personal data is carried out in accordance with applicable data protection legislation.

3. Data We Collect

• Full name
• Email address
• Phone number
• Physical address
• Service history and preferences

4. Purpose of Processing

• Appointment booking and service delivery
• Customer communication and support
• Sending appointment reminders
• Improving our services
• Compliance with legal obligations

5. Cookie Policy

Type	Name	Purpose	Duration
Essential	ck_consent	Stores cookie consent preference	1 year
Functional	session_id	Maintains your session	Session
Analytics	_ga	Google Analytics usage tracking	2 years

6. Data Sharing

We do not sell your data to third parties. We only share data with technical service providers under confidentiality agreements and with authorities when required by law.

7. Retention Period

We retain data for as long as necessary to provide our services and to comply with our legal obligations.

8. Your Rights

• Access: Know what data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data where applicable

9. Children's Privacy

We do not knowingly collect data from children under 16 without parental consent.

10. Security

We implement technical and organizational measures to protect your data including SSL encryption, restricted access and regular backups.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated by email or via a notice on the site.

12. Contact for Privacy Matters

For privacy inquiries, contact us at the email or address listed in Section 1. We aim to respond to all inquiries within 30 days.

13. How the Act Applies to This Site

The Data Protection Act, 2019 governs everything collected here. In practice that means the contact form, the files you attach to it and any notes we make while preparing a response. Nothing is gathered in the background for advertising purposes.

14. Confidentiality of Client Records

Documents received in the course of an engagement are held under both the Act and our own professional confidentiality obligations. Access is limited to the people assigned to the file, and copies are destroyed once the retention period ends.

15. Raising a Concern

Write to the address on this site if you want to know what we hold, have it corrected, or have it erased. If our answer does not satisfy you, the Office of the Data Protection Commissioner accepts complaints directly.