01Who this policy covers
WEBFLEG SOLUTIONS LTD (“WEBFLEG”, “we”) operates this corporate website and is the data controller for the personal data described here. This policy covers visiting this website and contacting WEBFLEG by phone, email or WhatsApp. It is written with Kenya’s Data Protection Act, 2019 and its regulations in mind.
KEYBAKI, our education product, has its own privacy policy and terms. This website does not access KEYBAKI accounts, learner records or any institution’s private systems.
02Information we collect
- When you contact us. If you call, email or message us on WhatsApp, we receive what you choose to share, such as your name, phone number, email address, organisation and the content of your message.
- When you visit the website. Our hosting provider processes technical information such as your IP address, the page requested, browser information and the time of the request, to deliver pages, troubleshoot faults and protect the website. Links from our pages to Contact can carry the topic of the page you came from.
This website has no forms or accounts. It does not ask for identity documents, financial information, passwords, health information or learner records, and you should not send them to us.
03How we use it and why
We use contact details and messages to answer your enquiry, discuss services you ask about and keep a record of that correspondence. We rely on our legitimate interest in responding to people who contact us, or on steps you ask us to take before entering into a contract.
We use technical information to run and secure the website, relying on our legitimate interest in operating a reliable, secure website.
We do not sell personal data, use it for advertising, or send marketing unless you have separately agreed to receive it. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. We do not make decisions about you based solely on automated processing.
06How long we keep it
We keep enquiry correspondence for as long as needed to deal with the enquiry and any services that follow, and then for as long as the law or the resolution of a dispute requires. Hosting logs are kept by our provider for a limited period for operation and security, then deleted.
07Your rights and requests
Under Kenya’s Data Protection Act, you may ask to be informed about how your data is used, to access it, to correct inaccurate data and to have it deleted where applicable. You may also object to processing and, where the legal conditions apply, ask for restriction or portability.
To make a request or ask a privacy question, email WEBFLEG SOLUTIONS LTD at mail@webfleg.com. We may ask for information reasonably needed to confirm your identity, and we respond within the period Kenyan law sets, explaining any lawful refusal.
Physical address: West End Towers, Tower A, 6th floor, Muthangari Drive/Waiyaki Way, Nairobi.
You can complain directly to the Office of the Data Protection Commissioner (ODPC) through its complaints portal or complaint@odpc.go.ke. You do not have to contact WEBFLEG first.
08Children
This website is intended for adults, including educators, institutional representatives and parents or guardians. Children under 18 should ask a parent or guardian to contact us on their behalf.
Please do not send us children’s names, assessment results, class lists or other private school records when you get in touch. An enquiry from an institution does not authorise us to process its learners’ data; any such processing is governed by a separate agreement and, for KEYBAKI, by its own privacy policy.
09Security and changes
The website is served over HTTPS, and we limit access to enquiry correspondence to the people who need it. No system is risk-free. If a personal-data breach occurs, we will assess it and notify the ODPC and the people affected where Kenyan law requires.
We will update this policy when the way we handle personal data changes, and the date above shows the latest update.
Legal references: Data Protection Act and regulations; ODPC guidance.