Effective and last updated: 7 August 2026
This notice is written with Kenya's Data Protection Act, 2019 in view. It should be reviewed whenever collection practices or service providers change.
1. Who This Policy Applies To
This policy explains how CitiDeveloper handles personal data when you visit this website, contact us, request a proposal, or communicate with us about our services. CitiDeveloper is responsible for the personal data it collects directly for these purposes.
A client project may involve separate privacy responsibilities and contractual terms. Those responsibilities will be addressed in the relevant project agreement where applicable.
2. Information We May Receive
We may receive your name, email address, telephone number, company, role, project details, correspondence, and any other information you choose to provide through email, telephone, WhatsApp, meetings, or project documents.
This website's project-brief form prepares a message in your device's email application. The form entry is not transmitted to or stored by this website. If you send the email, the resulting communication is handled through the relevant email services.
Hosting and security services may process limited technical information such as IP address, browser details, requested URLs, timestamps, and security events in ordinary server logs. We do not currently use advertising cookies or website analytics on this site.
3. Why We Process Personal Data
We process relevant personal data to respond to enquiries, evaluate and prepare project proposals, communicate about requested services, perform agreements, provide support, maintain security, keep appropriate business records, improve our services, and comply with legal obligations.
Depending on the context, processing may be based on your consent, steps requested before entering a contract, performance of a contract, compliance with law, or a legitimate business interest that does not override your rights.
4. Sharing and Service Providers
We do not sell personal data. Information may be processed by service providers that support email, hosting, communication, document collaboration, accounting, security, or professional advice. We limit access to what is reasonably needed for the service and expect appropriate confidentiality and protection.
We may disclose information where required by Kenyan law, a lawful authority, or where reasonably necessary to establish, exercise, or defend legal rights. WhatsApp and other third-party services process information under their own terms and privacy notices when you choose to use them.
5. International Transfers
Some technology providers may process or store information outside Kenya. Where a transfer occurs, we seek to use providers and arrangements that offer appropriate data-protection safeguards or another lawful basis for the transfer, consistent with applicable Kenyan requirements.
6. Retention
We retain personal data only for as long as reasonably required for the purpose for which it was collected, active business or project needs, recordkeeping, dispute resolution, security, and legal obligations. Retention periods vary with the type of record and relationship. Information that is no longer needed is deleted or anonymized where reasonably practicable.
7. Your Rights
Subject to applicable law and relevant exceptions, Kenyan data subjects may have the right to be informed about use of their data, access personal data held about them, object to processing, request correction of false or misleading information, and request deletion of false or misleading information. Other rights may apply under the Data Protection Act and its regulations.
To make a request, email hello@citideveloper.co.ke. We may need to verify your identity and clarify the scope before responding. You may also raise a concern with Kenya's Office of the Data Protection Commissioner.
8. Security
We use reasonable organizational and technical measures intended to protect personal data against unauthorized access, alteration, loss, or disclosure. No internet transmission or storage system can be guaranteed completely secure, so please avoid sending unnecessary sensitive information through ordinary email or WhatsApp.
9. Children
Our website and business services are not directed to children. We do not knowingly seek personal data directly from children through this website. If you believe a child has provided personal data without appropriate authority, contact us so the situation can be reviewed.
10. Changes and Contact
We may update this policy when our website, services, providers, or legal responsibilities change. The updated date below indicates the current version. Questions or privacy requests can be sent to hello@citideveloper.co.ke or directed to CitiDeveloper, Westlands, Nairobi, Kenya.
Related Information
Read our terms of service or contact us with a question.