Privacy Policy
Effective Date: January 1, 2024 | Last Updated: June 15, 2024
1. Overview
Intelisav Africa ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in compliance with:
- Kenya's Data Protection Act, 2019
- EU General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
This policy explains how we collect, process, and safeguard your information when you use our services (www.intelisav.com) or interact with us.
2. Data We Collect
A. Personal Data
Information that identifies you directly or indirectly:
| Category | Examples | Collection Method |
|---|---|---|
| Contact Information | Name, email, phone, company | Contact forms, service signups |
| Payment Data | Billing address, transaction history | Secure payment processors (Stripe, M-Pesa) |
| Technical Data | IP address, device type, browser | Automated tracking technologies |
B. Sensitive Data
We do not routinely collect:
- Biometric data, unless a client contractually requires it and we have documented the lawful basis and retention period
- Health information (unless providing healthcare software with explicit consent)
3. Legal Bases for Processing
We process data under the following lawful bases:
Contractual Necessity
To fulfill service agreements (e.g., software development contracts).
Consent
For marketing emails or cookie usage (revocable anytime).
Legal Compliance
To meet tax, cybersecurity, or anti-fraud regulations.
Legitimate Interests
For service improvement and fraud prevention.
4. Data Sharing & Third Parties
We may share data with:
- Service Providers: AWS (hosting), Twilio (SMS), Freshdesk (support)
- Business Partners: Payment gateways for transaction processing
- Legal Authorities: When required by Kenyan law or valid legal process
International Transfers: Data may be transferred to the US/EU under Standard Contractual Clauses or your explicit consent.
5. Security Measures
We implement technical and organizational measures including:
Encryption
TLS 1.2+ for data transit, AES-256 for storage
Access Controls
Role-based access, MFA for employees
Audits
Annual penetration testing by CERT-KE
6. Your Rights
| Access | Request a copy of your personal data | Submit Request |
| Rectification | Correct inaccurate information | Email Us |
| Erasure | Request deletion under certain conditions | Delete Data |
| Portability | Receive your data in a machine-readable format | Request Data |
Kenyan residents may file complaints with the Office of the Data Protection Commissioner.
7. Cookies & Tracking
We use:
- Essential Cookies: Session management (cannot be opted out)
- Analytics: Google Analytics (anonymized IPs)
- Marketing: Facebook Pixel (only with consent)