01Who This Policy Covers
WEBFLEG SOLUTIONS LTD operates this corporate website and determines the purposes and means of the personal-data processing it controls. This notice covers browsing these pages and using the website’s enquiry preview. It is written with Kenya’s Data Protection Act, 2019 and its implementing regulations in mind.
KEYBAKI’s linked website and application have separate privacy notices and service terms. This website does not access your KEYBAKI account, learner records or institution’s private systems.
02Information and How IT Is Used
- Enquiry drafts. The preview lets you enter a name, email, institution or school, role, topic, message and optional location or campus. Chat also retains your conversation, corrections and unanswered questions. These details build an editable preview in your browser; no enquiry is delivered to WEBFLEG, a support team or a CRM.
- School searches. Typing a school search sends the search text to this website’s server to return matching fictional school fixtures. The query appears in the request URL and may appear in hosting logs. Search only for a school or general location, never a learner’s name or private records. A selection does not establish membership or access.
- Technical requests. Hosting and network services process information such as your IP address, requested URL, browser information and request time to deliver pages, route traffic, troubleshoot faults and protect the website. Page links may carry the enquiry topic and originating page.
Providing enquiry details is optional: you can browse without them. Required fields only enable the demonstration’s review step. Use fictional details. The preview does not require identity documents, financial information, passwords, health information or learner records.
03Purposes and Lawful Grounds
Website delivery, security and requested enquiry functions support WEBFLEG’s legitimate interest in operating a useful, secure website, subject to your privacy rights. Any processing required by an applicable legal duty must be limited to that duty.
Optional marketing or other consent-based processing requires a separate, specific choice. Browsing, reading these terms or entering a draft is not blanket consent. Where consent is used, you may withdraw it without affecting earlier lawful processing. This preview has no mailing-list subscription, advertising integration or live enquiry submission.
The assistant follows fixed conversation rules. It does not send your messages to an AI model or make decisions about admission, grades, eligibility, credit or access rights.
04Browser Storage and Retention
Chat drafts use this tab’s session storage under webfleg-conversation-preview-v1. They survive reloads. Use the assistant’s restart control and confirm the reset to replace the conversation with a fresh draft. Closing the tab normally clears session storage, although browser session recovery can restore it. Clear this website’s browser data if you need to remove a restored draft.
The optional form holds its draft in memory. Reloading or leaving the form clears it. Switching enquiry journeys can retain shared contact details while the form is open. There is no server-side enquiry database or enquiry-retention period in this prototype.
The website application does not intentionally add advertising or analytics cookies. Hosting or access-control services may use necessary cookies. Blocking browser storage can prevent chat recovery without stopping ordinary page browsing.
Deleting a browser draft does not delete hosting or network logs. For information about the retention and deletion arrangements applying to your visit, contact mail@webfleg.com and identify the website address you used.
06Your Rights and Requests
Under Kenyan data-protection law, you may request information about processing, access to your personal data, correction of inaccurate data, and deletion where applicable. You may object to processing, request restriction, and request portability where the legal conditions apply. You also have protections relating to decisions based solely on automated processing that significantly affect you.
For data held only in your browser, use the edit and restart controls or clear site data. WEBFLEG cannot retrieve that draft remotely. For data WEBFLEG or its providers hold, describe the request and website address used. Only information reasonably needed to verify your identity and locate the relevant data should be requested. Requests must be handled within the applicable Kenyan statutory period, with any lawful refusal explained.
For privacy questions or to exercise your rights, email WEBFLEG SOLUTIONS LTD at mail@webfleg.com. The enquiry preview does not deliver privacy requests.
Physical address: West End Towers, Tower A, 6th floor, Muthangari Drive/Waiyaki Way, Nairobi.
You can complain directly to the Office of the Data Protection Commissioner (ODPC) through its Complaints Portal or complaint@odpc.go.ke. You do not have to complete a WEBFLEG complaint first.
07Children and School Information
This corporate enquiry preview is intended for adults exploring services, including educators, institutional representatives and parents or guardians. Children under 18 should ask a parent or guardian to handle an enquiry and should not enter personal details here.
Do not include children’s names, assessment results, class lists or other private school records. An institution’s enquiry does not authorise processing of its learners’ data. Any future service processing children’s data requires the applicable parent or guardian consent, age-verification safeguards and protection of the child’s rights and best interests. This preview provides no such enrolment or consent process.
08Security and Changes
The public website uses HTTPS. The enquiry preview limits draft storage to the browser, and school results expose only the demo directory’s public fields. Browser storage is accessible to someone using your browser profile, so avoid real personal information on a shared device.
No system is risk-free. If a personal-data breach occurs, WEBFLEG must assess it and notify the ODPC and affected people where Kenyan law requires.
This notice must be updated when actual processing changes, including before live enquiries, analytics or school integrations are enabled. The date above records the latest update.
Legal references: Data Protection Act and Regulations; ODPC Guidance.