Privacy Policy

Last updated: 20th September 2025

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use this website and our services. It also informs you about your privacy rights under Kenyan law and how the law protects you.

We use your Personal Data to provide and improve the services we offer to you. By using this website and our services, you agree to the collection and use of information in accordance with this Privacy Policy.

For the purposes of data protection, or to inform us about something relating to your personal data, please contact us using the following email: [email protected].

Governing Law: This Privacy Policy is established under the law and jurisdiction of The Republic of Kenya, specifically referencing the Data Protection Act, 2019 (DPA).

 

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

 

Definitions

For the purposes of this Privacy Policy:

      • Account means a unique account created for You to access our Service or parts of our Service.
      • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority.
      • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Iconic Digital Marketing Consultants Ltd, a company registered in Kenya.
      • Country refers to: The Republic of Kenya.
      • Data Controller (for the purpose of the Kenyan DPA) refers to the Company or the nominated individual/officer who determines the purposes and means of the processing of Personal Data.
      • Data Processor (for the purpose of the Kenyan DPA) refers to any natural or legal person who processes the data on behalf of the Company.
      • Device means any device that can access the Service such as a computer, a mobile phone, or a digital tablet.
      • Personal Data (for the purpose of the Kenyan DPA) means any information relating to an identified or identifiable individual, known as the Data Subject.
      • Service refers to this Website as well as the services we provide to You.
      • Service Provider means any natural or legal person who processes the data on behalf of the Company, and is considered a Data Processor.
      • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
      • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, and are referred to as the Data Subject or User.

 

Collecting and Using Your Personal Data

(The sections Types of Data Collected, Tracking Technologies and Cookies, and Use of Your Personal Data remain largely unchanged, as the types of data collected and the reasons for use are generally universal, but the legal basis for processing is defined below.)

 

Your Rights under the Kenyan Data Protection Act (DPA)

The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise your rights as granted under the Data Protection Act, 2019 of Kenya.

As a Data Subject under the DPA, you have the right to:

      • Be informed of the use to which your Personal Data is to be put.
      • Access your Personal Data that we hold.
      • Object to the processing of your Personal Data, in whole or in part.
      • Correction or Rectification of false or misleading Personal Data.
      • Deletion or Destruction of false or misleading Personal Data.

Legal Basis for Processing Personal Data under the DPA

We may process Personal Data only where we have a lawful basis to do so, which includes:

      • Consent: You have given your express consent to the processing of your Personal Data for one or more specific purposes.
      • Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract.
      • Legal Obligation: Processing is necessary for compliance with a legal obligation to which the Company is subject under Kenyan law.
      • Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party, except where those interests are overridden by your interests or fundamental rights and freedoms.

Exercising Your DPA Rights

You may exercise your rights of access, objection, correction, and deletion by contacting Us at [email protected]. We will request You to verify Your identity before responding to such requests.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya regarding our collection and use of Your Personal Data. For more information, please visit the official ODPC website.

 

Transfer of Your Personal Data

Your information, including Personal Data, may be processed at the Company’s operating offices in Kenya and in any other places where the parties involved in the processing are located.

If we transfer your Personal Data outside of Kenya, we will take all necessary steps to ensure that the recipient country or recipient organization has implemented adequate safeguards as required by the DPA, including the security of Your data and other personal information.

 

Removal of CCPA/CPRA and GDPR Sections

The detailed sections titled GDPR Privacy and CCPA/CPRA Privacy Notice have been removed entirely as they are specific to EU and California law, respectively, and are not relevant to a Kenyan-focused policy. The core rights derived from the DPA are captured under the Your Rights under the Kenyan Data Protection Act (DPA) section above.

Contact Us

If you have any questions about these Terms and Conditions, You can contact us: