1. Introduction
Savlicon Limited ("Savlicon", "we", "us", or "our") is committed to protecting the privacy of our clients, website visitors, and stakeholders. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Kenya's Data Protection Act, 2019 (DPA) and international best practices.
2. Data We Collect
We may collect the following categories of personal data:
Contact Information: Name, email address, phone number, company name, and physical address provided through our contact forms, service agreements, or direct communications.
Technical Data: IP addresses, browser type, device information, and usage patterns collected automatically when you visit our website.
Service Data: Information related to IT services we provide, including device inventories, network configurations, and support ticket details.
Financial Data: Payment information required to process invoices and service fees, including M-Pesa transaction references.
3. How We Use Your Data
We process your personal data for the following purposes:
To deliver, maintain, and improve our IT services; to communicate with you about your account, support requests, and service updates; to process payments and manage billing; to comply with legal obligations, including Kenya's DPA and tax regulations; and to send relevant industry insights via our Savlicon Pulse blog (with your consent).
4. Legal Basis for Processing
We process your data based on: contractual necessity (to deliver services you've engaged us for), legitimate interest (to improve our services and protect our network), legal obligation (tax and regulatory compliance), and consent (for marketing communications, which you may withdraw at any time).
5. Data Sharing
We do not sell your personal data. We may share data with trusted third-party service providers who assist in delivering our services (such as cloud hosting providers, payment processors, and software vendors). All third parties are contractually bound to protect your data in accordance with the DPA.
6. Data Security
We implement industry-standard security measures including encryption in transit and at rest, access controls, regular security audits, and employee training. Despite these measures, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Service-related data is typically retained for the duration of our business relationship plus 7 years for tax compliance purposes.
8. Your Rights
Under Kenya's Data Protection Act, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal obligations); object to or restrict certain processing activities; data portability; and withdraw consent at any time. To exercise these rights, contact us at privacy@savlicon.co.ke.
9. Cookies
Our website uses essential cookies to ensure proper functionality. We may also use analytics cookies (such as Google Analytics) to understand how visitors interact with our site. You can control cookie preferences through your browser settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via our website or email. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Us
For questions about this Privacy Policy or to exercise your data rights, contact our Data Protection team at privacy@savlicon.co.ke or write to us at Westlands Commercial Center, Nairobi, Kenya.
12. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.