Privacy Policy
Last updated: July 22, 2026
1. Who we are
Tsavo Hosting Ltd is a Kenyan company registered and operating from Nairobi. This policy describes how we collect, use, and protect personal data when you use our website and services.
2. Data we collect
We collect data you give us directly, such as name, email address, phone number, business details, billing information, and any content you submit through support tickets. We also collect data automatically, including IP address, browser type, device information, and site activity for security and performance purposes.
3. How we use your data
We use your data to provide the services you have signed up for, process payments, communicate with you about your account, provide support, comply with legal obligations, and improve our services. We do not sell your data to third parties.
4. Legal basis
We process your personal data under the lawful bases set out in the Kenya Data Protection Act, 2019, including performance of a contract, legitimate interest, legal obligation, and, where applicable, your consent.
5. Sharing your data
We share data only with parties needed to run our services, such as payment processors, domain registries including KENIC for .KE domains, email delivery providers, and infrastructure vendors. All partners are bound by confidentiality and data protection commitments.
6. Cookies
We use essential cookies to run the website and dashboard, and optional analytics cookies to understand usage. You can control cookies through your browser settings.
7. Data retention
Account and billing data is kept for the duration of your relationship with us and for seven years after closure to meet tax and legal requirements. Support tickets are retained for two years. Backups are held for thirty days.
8. Your rights
Under the Kenya Data Protection Act, you have the right to access, correct, delete, and object to the processing of your personal data. You may also lodge a complaint with the Office of the Data Protection Commissioner.
9. Security
We use encryption in transit and at rest, restricted access controls, and regular security reviews to protect your data. No system is perfect, so we ask you to also protect your account credentials.
10. International transfers
Where data is transferred outside Kenya, we take steps to ensure it is protected to at least the same standard as required by Kenyan law.
11. Contact
To exercise your rights or ask a question about this policy, email privacy@tsavohosting.com.