Privacy Policy

This site is run by Wycliffe Onduu, Nairobi, Kenya. I collect as little personal data as this site needs to work, and I don't sell it to anyone. This page explains what is collected, why, and what your rights are under the Kenya Data Protection Act, 2019.

What I collect

Contact form. Your name, email address, company (optional), a topic, and your message. This is delivered to my email inbox so I can reply. The form is protected by Google reCAPTCHA, which checks that you're human.

Analytics. I use Google Analytics to understand how the site is used — pages visited, approximate location, device type. IP addresses are anonymized. This data is aggregated; I can't identify you from it.

Email automation. I use Encharge to manage the emails I send. If you're on my list, Encharge may record which pages you visit on this site and which emails you open, so I don't send you things you've already read. Unlike the analytics above, this is tied to your email address rather than anonymous. It stops if you unsubscribe.

Domain searches. When you check a name on the domain search page, the domain and the time are recorded so I can see what people are looking for and measure referrals, and that record is kept indefinitely. Nothing that identifies you is stored with it: no IP address, no user agent, no name, no email, no cookie. The registration link goes to HOSTAFRICA, which handles availability, payment and registration under its own privacy policy — this site takes no payment or registration details.

Email security checks. When you check a domain on the email security page, the domain, the result of each check, your country and the time are recorded, and that record is kept indefinitely. It tells me which extensions and which kinds of problem are most common, which is what the advice on this site is built from. Nothing that identifies you is stored: no IP address, not even a hashed one, no user agent, no name, no email, no cookie. Everything checked is a public DNS record that anyone can look up. The lookups themselves go to Cloudflare's public DNS resolver.

Server logs. The site runs on Cloudflare, which keeps standard technical logs (IP address, request time) to serve and secure the site.

How I use it

To reply to your message, provide what you asked for, and — if you asked to hear from me — send occasional emails you can unsubscribe from at any time. That's it. No selling data, no third-party advertising.

Who processes it

A small set of service providers handle data on my behalf: Cloudflare (hosting), Zoho ZeptoMail (email delivery), VBOUT (email list), Encharge (email automation), Google (analytics, tag management and reCAPTCHA), and Slack (internal notifications of new enquiries). Each processes only what its job requires.

How long I keep it

Enquiries are kept as long as they're useful for our conversation, then deleted. Mailing-list contacts are kept until you unsubscribe. Domain search records are kept indefinitely; they contain no personal data. Analytics data is retained on Google's standard schedule.

Your rights

Under the Kenya Data Protection Act, 2019, you can ask me what data I hold about you, ask me to correct it or delete it, object to how it's used, and withdraw consent at any time. Send me a message through the contact form and I'll act on it. You can also complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

Contact

Questions about this policy or your data? Reach me through the contact form.

Changes

If this policy changes, the date at the top changes with it. No silent edits.