Privacy Policy

Last Updated: October 30, 2025

Bribmac Ltd (“we,” “our,” or “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website, products, or services.

We are guided by the Kenyan Data Protection Act, 2019, and other applicable data protection laws, including international standards such as the General Data Protection Regulation (GDPR).

By visiting our website or using our services, you agree to the terms outlined in this policy.

1. Definitions

  • Personal Data – Any information relating to an identified or identifiable natural person (e.g., name, email address, contact details, etc.).

  • Processing – Any operation performed on personal data such as collection, storage, use, disclosure, or deletion.

  • Data Subject – The individual whose personal data is collected.

  • Controller – Bribmac Ltd, which determines the purposes and means of processing personal data.

  • Processor – Any third party that processes personal data on our behalf (e.g., hosting companies, analytics tools).

2. Information We Collect

We may collect both personally identifiable and non-personally identifiable information through various channels:

a). Information You Provide Directly

When you:

  • Fill out forms on our website

  • Request a quote or service proposal

  • Subscribe to newsletters or updates

  • Communicate via email, phone, or chat

  • Make a payment or sign a contract

We may collect:

  • Full name

  • Email address

  • Phone number

  • Company name

  • Physical or postal address

  • Job title and industry

  • Project or service details

b). Information Collected Automatically

When you visit our website, we automatically collect:

  • Browser and operating system details
  • Device type

  • Referring URLs and pages visited

  • Date, time, and duration of visits

  • Clicks, scrolling behavior, and navigation patterns

This information helps us analyze user behavior and improve website performance.

c). Information from Third Parties

We may receive information about you from:

  • Marketing partners or affiliates

  • Publicly available online sources

  • Social media networks (if you interact with our content or ads)

3. How We Use Your Information

We process your personal data for the following purposes:

  1. Service Delivery – To respond to inquiries, deliver services, and manage ongoing projects.

  2. Client Relationship Management – To maintain communication with clients, send updates, and handle support requests.

  3. Marketing and Communication – To send newsletters, promotional messages, and updates about our products and services (only with your consent).

  4. Billing and Accounting – To issue invoices, process payments, and maintain financial records.

  5. Security and Fraud Prevention – To detect unauthorized access, fraudulent activity, or security incidents.

  6. Legal and Regulatory Compliance – To comply with legal obligations or respond to lawful government requests.

  7. Improvement and Analytics – To enhance our website experience through analytics, feedback, and performance monitoring.

We will never use your personal data for automated decision-making or profiling without your explicit consent.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent – When you voluntarily share information or opt into communications.

  • Contractual Necessity – When processing is required to perform or fulfill a contract (e.g., delivering a service).

  • Legal Obligation – When required to comply with legal or regulatory requirements.

  • Legitimate Interest – When processing is necessary for our legitimate business purposes, such as improving services, preventing fraud, or marketing relevant offerings.

5. Cookies and Tracking Technologies

Our website uses cookies and other tracking technologies to enhance user experience, analyze performance, and deliver personalized content.

Types of Cookies We Use:

  • Essential Cookies: Required for website functionality.

  • Analytics Cookies: Help us understand visitor behavior (via Google Analytics, Meta Pixel, etc.).

  • Marketing Cookies: Enable remarketing and targeted advertising.

  • Preference Cookies: Store user preferences (e.g., language, region).

You can manage or disable cookies in your browser settings. Note that disabling cookies may affect certain website features.

6. Data Storage and Retention

All personal data is stored securely on encrypted servers, accessible only to authorized personnel.

We retain your data only as long as necessary to:

  • Fulfill the purpose for which it was collected, or

  • Comply with legal, accounting, or reporting obligations.

After the retention period, your data is permanently deleted or anonymized.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data.
However, we may share it under these circumstances:

  • With Trusted Service Providers: e.g., hosting, email, cloud storage, analytics, and marketing partners.

  • With Legal or Regulatory Authorities: if required by law or court order.

  • During Business Transfers: if Bribmac Ltd merges or is acquired, data may be part of the transferred assets (users will be notified).

  • With Your Consent: for collaborations or specific marketing campaigns.

All third-party processors are bound by data processing agreements ensuring your data remains secure and confidential.

8. International Data Transfers

Bribmac Ltd operates primarily in Kenya but may transfer personal data to third parties or servers located in other countries.
When this happens, we ensure that:

  • Data is transferred only to countries with adequate protection laws, or

  • We apply appropriate safeguards such as Standard Contractual Clauses (SCCs) or data transfer agreements.

9. Data Security

We employ both technical and organizational measures to protect your data, including:

  • SSL encryption for all website communication

  • Regular system security audits

  • Strong password and access control policies

  • Data encryption and anonymization techniques

  • Secure backups and server monitoring

Despite these measures, no internet transmission is 100% secure, and users are encouraged to exercise caution when sharing information online.

10. Your Rights as a Data Subject

Under the Kenyan Data Protection Act (2019) and GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data we hold.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure (“Right to be Forgotten”): Ask us to delete your personal data where applicable.

  • Right to Restrict Processing: Request limitation on how we use your data.

  • Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.

  • Right to Object: Object to processing based on legitimate interests or for direct marketing.

  • Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us.

11. Children’s Privacy

Our website and services are intended for adults (18 years and above).
We do not knowingly collect personal data from children. If we discover such data, it will be deleted immediately.

12. Third-Party Websites

Our website may contain links to external websites.
Bribmac Ltd is not responsible for the privacy practices or content of those third-party sites.
We recommend reviewing their privacy policies before sharing personal data.

13. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect updates in legal requirements or service changes.
All revisions will be posted on this page with the updated date.
We encourage you to review this page periodically.

14. Contact Information

If you have questions, concerns, or wish to exercise your data protection rights, please contact us.