Privacy policy

Kaptured Creatives respects your privacy. This policy explains what personal information we collect through this website and when we work together, why we collect it, and how we look after it, in line with Kenya's Data Protection Act, 2019.

Who we are

Kaptured Creatives is a brand, web and content studio based in Westlands, Nairobi, Kenya. We decide how your personal information is used, which makes us its data controller. For any privacy question, email support@kaptured.co.ke.

What we collect

• Enquiries. When you send a project enquiry we collect what you give us: your name, email address, phone number, company, the services you're interested in, your budget and timeline, and your message.
• Security checks. Our contact form, and the pages where you pay, approve, sign or comment, use Cloudflare Turnstile to check that a person is using them. Cloudflare processes basic technical data, such as your IP address and browser details, for that check only.
• Website visits. We count page views and clicks without cookies. We record the page, the site that sent you, any campaign tags in the link, your device type and your country. To count unique visitors we combine your IP address and browser details with a secret that changes every day and keep only the scrambled result, so we can't identify you or follow you from one day to the next. See our cookie policy.
• Clients. If we work together we also keep your billing details, project files, feedback, approvals and payment records. When you sign a document online we record the name you type, the time, and your IP address and browser, as evidence of the signature.

Why we use it

• To reply to your enquiry and prepare a quote, because you asked us to.
• To deliver the project, send invoices and receipts, and support you afterwards, because that's part of our contract with you.
• To keep tax and accounting records, because the law requires it.
• To keep the website secure, stop spam and understand which pages are useful, because we have a legitimate interest in running a safe and useful site.

We don't sell your information, use it for advertising or make automated decisions about you. We only send you marketing if you've agreed to it, and every such email lets you opt out.

Who can see it

Only the Kaptured Creatives team. We use a small number of trusted providers to run our business, and each one only processes your information on our instructions:

• Vercel, which hosts this website.
• Supabase, which stores our database and files.
• Cloudflare, for our domain, email forwarding and spam protection.
• Google, for our email.
• Meta, which runs WhatsApp, when you message us on WhatsApp or ask for a WhatsApp confirmation. We keep the messages in our studio system so we can follow up on your project.
• Safaricom M-Pesa, when you pay us. When you pay by M-Pesa we receive your phone number, the amount and the M-Pesa receipt number, never your PIN.

We may also share information when the law requires it, for example with the Kenya Revenue Authority.

Where it's stored

Some of our providers store data on servers outside Kenya, including in the European Union and the United States. We only use providers that protect personal data to a standard at least as high as Kenyan law requires, under the contracts and safeguards set out in sections 48 to 50 of the Data Protection Act.

How long we keep it

• Enquiries that don't become projects: up to two years, then we delete them.
• Project and billing records: for as long as tax law requires, which is currently at least five years.
• Website visit counts never contain your name or contact details.

How we protect it

Your information is sent over encrypted connections and stored with providers that encrypt it at rest. Access to our studio tools is limited to our team and protected by passwords. If a breach puts your information at risk, we'll tell the Office of the Data Protection Commissioner within 72 hours and let you know without delay.

Your rights

Under the Data Protection Act you have the right to:

• be told how your information is used
• see the information we hold about you
• correct information that's wrong or out of date
• have information deleted when we no longer need it
• object to us using it, or ask us to limit how we use it
• receive a copy in a common format, or have it sent to someone else

To use any of these rights, email support@kaptured.co.ke. We may ask you to confirm who you are, and we'll respond within 30 days. If you're unhappy with how we've handled your information, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.

Children

This website and our services are meant for businesses and adults. We don't knowingly collect information from anyone under 18.

Changes

We'll update this page if the way we handle your information changes, and the date at the top will show when it last changed.