Privacy Policy

1. Who we are

Tsavo Hosting Ltd is a Kenyan company registered and operating from Nairobi. This policy describes how we collect, use, and protect personal data when you use our website and services.

2. Data we collect

We collect data you give us directly, such as name, email address, phone number, business details, billing information, and any content you submit through support tickets. We also collect data automatically, including IP address, browser type, device information, and site activity for security and performance purposes.

3. How we use your data

We use your data to provide the services you have signed up for, process payments, communicate with you about your account, provide support, comply with legal obligations, and improve our services. We do not sell your data to third parties.

4. Legal basis

We process your personal data under the lawful bases set out in the Kenya Data Protection Act, 2019, including performance of a contract, legitimate interest, legal obligation, and, where applicable, your consent.

5. Sharing your data

We share data only with parties needed to run our services, such as payment processors, domain registries including KENIC for .KE domains, email delivery providers, and infrastructure vendors. All partners are bound by confidentiality and data protection commitments.

6. Cookies

We use essential cookies to run the website and dashboard, and optional analytics cookies to understand usage. You can control cookies through your browser settings.

7. Data retention

Account and billing data is kept for the duration of your relationship with us and for seven years after closure to meet tax and legal requirements. Support tickets are retained for two years. Backups are held for thirty days.

8. Your rights

Under the Kenya Data Protection Act, you have the right to access, correct, delete, and object to the processing of your personal data. You may also lodge a complaint with the Office of the Data Protection Commissioner.

9. Security

We use encryption in transit and at rest, restricted access controls, and regular security reviews to protect your data. No system is perfect, so we ask you to also protect your account credentials.

10. International transfers

Where data is transferred outside Kenya, we take steps to ensure it is protected to at least the same standard as required by Kenyan law.

11. Contact

To exercise your rights or ask a question about this policy, email privacy@tsavohosting.com.