This notice explains how Christo Tech Solutions ("we", "us") handles personal information collected through christotech.co.ke. We are the data controller for that information.
We keep this notice short and plain on purpose. If anything is unclear, ask us.
Who we are
Christo Tech Solutions, KASNEB Towers, 10th Floor, UpperHill, Nairobi, Kenya. Email [email protected]. Phone +254 734 461 317. Write to the email address for any privacy question or request.
What we collect and why
We collect only what you give us through our forms, and a small amount of technical information needed to keep the site secure.
- Contact forms (call back, message, quote, support, incident report, careers): your name, phone number or email address, organisation if you give it, the services you choose, and your message. We use these to reply to you and to provide the service you ask for.
- Security check: your answers are scored in your browser. We store an anonymous result (a score and the area scores) to improve the check. It contains no personal details. If you ask us for a copy of your report or a call, the details you give in the form are handled as a contact form.
- Technical information: a one-way scrambled version of your network address (not the address itself), your browser's description and the page you were on when you sent a form. We use these to stop abuse and to investigate a fault. We also keep short-lived records of requests to protect the site from floods and attacks.
- Careers form: the details and link you give, used only to consider you for work with us.
Our lawful basis
We rely on your consent, which you give by ticking the box on a form, and on our legitimate interest in keeping our site secure and responding to enquiries. You can withdraw consent at any time by writing to us.
Who sees your information
Our staff see form submissions. We use service providers to run the site, host the database and send email on our behalf. They may process your information only for those purposes and under their own security obligations. We do not sell your information and we do not use it for advertising by other companies. We may disclose information where the law requires it, for example to a court or a regulator.
Where it is stored
Form data is stored in a database operated for us. Our service providers may process data outside Kenya. Where that happens we take steps to see that your information is protected to a standard comparable to Kenyan law, as the Data Protection Act, 2019 requires.
How long we keep it
- Enquiries that do not lead to work: up to 24 months, then deleted or made anonymous.
- Clients: for the length of the service and the period the law or our accounting requires after it ends.
- Careers details: up to 12 months unless you ask us to keep them longer.
- Technical records of requests: a short period, normally days to weeks.
Your rights
Under the Data Protection Act, 2019 you may ask us to tell you what we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to give you a copy in a usable format. You may also withdraw consent. Write to [email protected]. We reply within the time the law sets. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner of Kenya.
Security
Our site uses encryption in transit, access controls, logging and rate limits. No system is perfectly secure, and we cannot promise that information will never be accessed without permission. If a breach affects you, we will tell you and the regulator as the law requires.
Children
This website is for businesses and is not aimed at children. Do not send us information about a child.
Cookies
We do not use advertising or tracking cookies. See our cookie notice.
Changes
We may update this notice. The date at the top shows when it last changed. Material changes will be shown on this page.