Privacy Policy

Last updated: June 20, 2025

1. Introduction

EastAfricaInvestMentor ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website and services.

We comply with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and Kenyan data protection legislation. We encourage you to read this Privacy Policy carefully to understand our practices regarding your personal data.

2. Data we collect

We may collect the following categories of personal data:

  • Identification information: Name, email address, phone number.
  • Technical information: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
  • Usage information: Information about your visit to our website, including the full URL, browsing history, products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information.
  • Communication information: Content of messages you send us through the contact form or other communication channels.

3. How we collect your data

We collect personal data through the following methods:

  • Information you provide directly: When you complete forms on our website, contact us, or otherwise interact with our services.
  • Automated technologies: When you visit our website, we may automatically collect technical and usage information through cookies, web analytics, and other similar technologies.
  • Third-party sources: In certain circumstances, we may receive information about you from third-party service providers, such as social media platforms, if you have chosen to share it with us.

4. Purposes of data processing

We use your personal data for the following purposes:

  • To provide you with the information and services you have requested.
  • To respond to your questions and requests.
  • To improve our website and services.
  • To personalize your experience on our website.
  • To send you informative communications about our services, if you have subscribed to them.
  • To detect and prevent fraudulent or abusive activities.
  • To comply with legal and regulatory obligations.

5. Legal basis for processing

We process your personal data based on the following legal grounds:

  • Your consent: When you have given us explicit consent to process your data.
  • Contract performance: When processing is necessary to fulfill a contract to which you are a party or to take steps at your request before entering into a contract.
  • Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, except where your fundamental interests or rights and freedoms prevail.
  • Legal obligations: When processing is necessary to comply with a legal obligation to which we are subject.

6. Sharing your data

We may share your personal data with the following categories of recipients:

  • Service providers: Third parties who provide us with services such as web hosting, analytics, payment processing, etc.
  • Business partners: Third parties we collaborate with to offer certain services or conduct joint promotional activities.
  • Public authorities: When we are required to disclose information in accordance with law or in response to legal proceedings.
  • Business successors: In the event of a merger, acquisition, or asset sale, your personal data may be part of the transferred assets.

We will not sell, rent, or distribute your personal data to third parties without your consent, except as mentioned in this policy.

7. International data transfers

Your personal data may be transferred and processed in countries outside the European Economic Area (EEA). In such cases, we will ensure that transfers are made in accordance with GDPR and other applicable data protection laws.

For transfers outside the EEA, we will implement adequate protective measures, such as standard contractual clauses approved by the European Commission, binding corporate rules, or other legal data transfer mechanisms.

8. Data security

We have implemented appropriate technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, use, modification, or disclosure.

Among our security measures are:

  • Encryption of sensitive data.
  • Implementation of strict access controls.
  • Regular vulnerability assessments.
  • Staff training on data security practices.

However, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security of your data.

9. Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means.

10. Your rights

Under applicable data protection laws, you have the following rights:

  • Right of access: The right to request a copy of the personal data we hold about you.
  • Right to rectification: The right to request correction of inaccurate or incomplete personal data.
  • Right to erasure: The right to request deletion of your personal data in certain circumstances.
  • Right to restrict processing: The right to request restriction of processing of your personal data in certain circumstances.
  • Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object: The right to object to processing of your personal data in certain circumstances.
  • Right to withdraw consent: The right to withdraw your consent at any time, where we rely on your consent for processing the data.

To exercise any of these rights, please contact us using the details provided in the "Contact us" section below.

11. Cookies and similar technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyze website usage, and personalize content.

For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

12. Children's privacy

Our website and services are not intended for persons under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will take steps to remove such information from our systems.

13. Links to other websites

Our website may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly recommend that you review the Privacy Policy of every website you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our information practices or other operational, legal, or regulatory updates.

We will notify you of any significant changes by posting the new Privacy Policy on this page and, if necessary, sending you a notification.

We recommend that you review this Privacy Policy periodically to be informed about how we protect your information.

15. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Address: Next To DC's Office, Next To Town Council, P. O Box 76, Nkubu

Phone: +2546451011

If you are a resident of the European Union and feel we have not satisfactorily addressed your complaint, you have the right to contact your local data protection authority.