Legal
Privacy Policy
Effective · 1 January 2026 · Kenya Data Protection Act 2019
1. Who we are
Orwan Consulting ("we", "our", "us") is a software development and consulting company based in Westlands, Nairobi, Kenya. We build custom websites, mobile applications, POS, ERP, CRM, and AI systems for businesses. You can reach us at info@orwanconsulting.com or +254 798 184 724.
2. Data we collect
When you use our website or engage our services, we may collect: your name, email address, phone number, company name, and the details you share in project enquiries; analytics data such as pages visited, device type, and approximate location (via Google Analytics and Google Tag Manager); and, for clients, the business data required to deliver and support your project, which may include customer, transaction, or employee records you ask us to process.
3. How we use your data
We use personal data to respond to enquiries and prepare proposals; deliver, maintain, and support the systems we build for you; send service updates, invoices, and project communications; improve our website and understand how visitors use it; and meet our legal and tax obligations. We do not sell your personal data, and we do not use client business data for any purpose other than delivering the agreed service.
4. Lawful basis — Kenya Data Protection Act 2019
We process personal data under the Kenya Data Protection Act 2019 on the basis of your consent (for example, when you submit an enquiry form), the performance of a contract (when we deliver services to you), or our legitimate interests (such as securing our systems and improving our website), provided those interests do not override your rights.
5. Cookies and analytics
Our website uses essential cookies to function and analytics cookies (Google Analytics 4, Google Tag Manager) to measure traffic. Analytics cookies are used to understand aggregate usage patterns and do not identify you personally. You can block or delete cookies through your browser settings; the website will continue to work without them.
6. Sharing and third parties
We share data only with processors who help us run our business — for example, hosting providers, analytics providers, and payment or communication services — under agreements that protect your data. Where a client system we build integrates third-party services (such as Safaricom M-Pesa Daraja or KRA eTIMS), data shared with those services is governed by their own policies.
7. Storage and security
We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS), access controls, and secure hosting. Data is retained only as long as necessary for the purposes collected, or as required by law (for example, tax records).
8. Your rights
Under the Data Protection Act 2019 you have the right to: be informed of the use of your personal data; access your personal data held by us; request correction or deletion of inaccurate or unnecessary data; object to or restrict processing; withdraw consent at any time; and lodge a complaint with the Office of the Data Protection Commissioner (ODPC). To exercise any of these rights, email info@orwanconsulting.com and we will respond within 30 days.
9. Changes to this policy
We may update this policy as our services or legal requirements change. The latest version will always be published on this page with the effective date.
Questions about your data?
Ask us anything about how we handle your data.
Email info@orwanconsulting.com and our team will respond within 30 days, as required by the Data Protection Act 2019.