AFI Solutions logo
Back to Home
Kenya Data Protection Act, 2019 Compliant

Privacy Policy

Last updated: August 2026

Introduction

Welcome to AFI Solutions Ltd (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.afisolutions.co.keand use our services.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.

Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when:

  • Filling out our contact or consultation request forms
  • Subscribing to our newsletter or insights
  • Communicating with us via email, phone, or WhatsApp
  • Requesting our services or quotes

This may include:

  • Full name
  • Email address
  • Phone number
  • Business name
  • Service interest
  • Message content

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URLs
  • Pages visited and time spent
  • Device identifiers

This is collected via cookies and similar tracking technologies. See our Cookie Policyfor details.

2.3 Information from Third Parties

We may receive information about you from third-party sources such as:

  • Analytics providers (Google Analytics)
  • Social media platforms (when you interact with our content)
  • Referral partners

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide requested services
  • Send you marketing communications (with your consent)
  • Improve our website and user experience
  • Analyze website traffic and usage patterns
  • Comply with legal obligations
  • Protect against fraud and security threats
  • Manage our business operations

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers:Third-party vendors who perform services on our behalf (email, analytics, hosting, CRM)
  • Professional Advisors:Legal, accounting, and compliance advisors
  • Regulatory Authorities:KRA, ODPC, or other authorities when legally required
  • Business Transfers:In connection with a merger, acquisition, or sale of assets

All third parties are contractually obligated to protect your data and use it only for the specified purposes.

Data Retention

We retain your personal information only as long as necessary:

  • Contact form data: 3 years from last contact
  • Client engagement records: 7 years (per Kenya tax law requirements)
  • Marketing data: Until you unsubscribe or 2 years of inactivity
  • Analytics data: 26 months (Google Analytics default)

Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Access:Request a copy of your personal data
  • Rectification:Correct inaccurate or incomplete data
  • Erasure:Request deletion (“right to be forgotten”)
  • Restriction:Limit how we process your data
  • Portability:Receive your data in a structured, commonly used format
  • Objection:Object to processing for direct marketing
  • Withdraw Consent:Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at info@afisolutions.co.ke.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

  • SSL/TLS encryption for data in transit
  • Secure hosting with access controls
  • Regular security assessments
  • Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure.

International Data Transfers

Your information may be transferred to and processed in countries other than Kenya (e.g., cloud servers in the EU or US). We ensure adequate safeguards are in place, including Standard Contractual Clauses or adequacy decisions, as required by the Data Protection Act.

Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

Have questions about your data?

We’re happy to help. Reach out to our team for any privacy-related inquiries.

Contact Us