Privacy Policy
Last updated October 2026.
This policy explains what personal data Edgecom Web Solutions collects when you use this website, why we collect it, who else can see it, and what you can ask us to do with it. It is written to meet the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.
1. Who we are
The data controller for this website is [NEEDS OWNER INPUT: registered company name] , trading as Edgecom Web Solutions, registered in Kenya under number [NEEDS OWNER INPUT: company registration number] , at [NEEDS OWNER INPUT: registered postal address] .
Our registration with the Office of the Data Protection Commissioner is [NEEDS OWNER INPUT: ODPC data controller registration number] .
For anything in this policy, write to website@hostingke.co.ke or call +254 796 358 081.
2. What we collect
We collect three kinds of data, and nothing else.
Data you give us
When you submit the contact form, the quote builder or a product quote form, we receive your name, email address, and — where you choose to give them — your phone number, company name and whatever you write in the message field. The quote forms also record the options you picked, because that is what the quote is calculated from. Every field beyond name, email and your message is optional and marked as such on the form.
Data collected automatically
Our web server keeps standard access logs: IP address, the page requested, the time, the referring page, and your browser's user-agent string. These logs exist to keep the site available and to investigate abuse. They are not used to build a profile of you.
Data from cookies and analytics
Only if you accept them. See section 5 and our cookies policy.
3. Why we use it, and on what legal basis
- To answer you and prepare quotes. If you send us an enquiry, we use your details to reply and to prepare the proposal you asked for. The lawful basis is that you have asked us to take steps before entering into a contract.
- To run the website securely. Server logs and the session cookie are necessary for the site to function and to defend it against abuse. The lawful basis is our legitimate interest in a working, secure service.
- To understand how the site is used. Analytics run only with your consent, and you can withdraw it at any time.
We do not use your details for marketing you did not ask for, and we do not sell or rent personal data to anyone.
4. Who else sees your data
We use the following third parties. Each is a data processor acting on our instructions, or an independent controller where noted.
| Who | What they do | Where |
|---|---|---|
| HostingKE | Hosts this website and its database, and runs the client portal your quotes are issued from. Operated by Edgecom. | Kenya |
| Google (Analytics 4) | Aggregate traffic reporting. Loads only if you accept analytics cookies. IP addresses are truncated and advertising signals are switched off. | USA / EU |
| Email provider | Delivers your enquiry to our inbox and our reply to yours. | Kenya |
The site's typefaces are served from our own server, not from Google Fonts or any other font CDN, so loading a page does not disclose your IP address to a font provider.
Google may process data outside Kenya. Where that happens, the transfer relies on Google's standard contractual protections. We will also disclose data where the law requires it — a court order, or a lawful request from a regulator.
5. Cookies
Essential cookies keep your session and the security token on the forms working; the site cannot function without them and they carry no analytics. Everything else — Google Analytics — loads only after you press Accept on the cookie banner, and not before. You can change or withdraw that decision at any time using the Cookie settings link in the footer. Full detail is in the cookies policy.
6. How long we keep it
- Enquiries and quote requests: 24 months from your last contact with us, then deleted.
- Client project records: for the life of the engagement plus seven years, which is what the Tax Procedures Act requires of our accounting records.
- Server access logs: 90 days.
- Analytics data: 14 months, Google's shortest retention setting.
7. Keeping it safe
The site is served over HTTPS. Access to the admin area and the database is restricted to named staff accounts, forms are rate-limited and CSRF-protected, and backups are encrypted. No system is perfectly secure, and we will not claim otherwise — but if a breach ever puts your rights at risk, we will notify you and the Office of the Data Protection Commissioner within 72 hours, as the Act requires.
8. Your rights
Under the Data Protection Act, 2019 you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct anything inaccurate or incomplete;
- delete your data, where we have no continuing legal reason to keep it;
- stop or restrict a particular use of it;
- hand it over in a portable format;
- object to processing we do on the basis of legitimate interest.
Email website@hostingke.co.ke and we will respond within 30 days. There is no charge. If you are not satisfied with how we handle it, you can complain to the Office of the Data Protection Commissioner (ODPC).
9. Children
This site is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us their details, tell us and we will delete them.
10. Changes to this policy
If we change what we collect or who we share it with, we will update this page and the date at the top. A change to the third parties in section 4 also resets the cookie banner, so you will be asked again.