<h2>1. Our Commitment</h2>
<p>Ezalta Technologies Ltd ("Ezalta", "we", "us", "our") processes personal data as part of delivering software, AI, and cloud services to our clients. This policy sets out how we collect, use, store, and protect that data in accordance with the Kenya Data Protection Act, 2019, and, where applicable, other relevant data protection regulations.</p>
<h2>2. Data We Process</h2>
<p>This includes personal data submitted through our website (contact forms, career applications, project estimator, newsletter signups) and personal data we process on behalf of clients under service agreements or data processing addenda.</p>
<h2>3. Legal Basis for Processing</h2>
<p>We process personal data on the basis of consent, contractual necessity, legitimate business interest, or compliance with a legal obligation, depending on the context in which the data was collected.</p>
<h2>4. Data Controller vs Data Processor</h2>
<p>Where Ezalta collects data directly from you (e.g. via our contact form), we act as the data controller. Where we process data on behalf of a client under a service agreement, we act as a data processor, and the client's own privacy notice and instructions govern that data.</p>
<h2>5. Data Retention & Security</h2>
<p>We retain personal data only as long as necessary for the purpose it was collected, or as required by law or contract, and apply appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse.</p>
<h2>6. Data Subject Rights</h2>
<p>Under the Kenya Data Protection Act, you have the right to be informed of the use of your data, to access it, to request correction or deletion, to object to processing, and to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).</p>
<h2>7. International Transfers</h2>
<p>Where personal data is transferred outside Kenya (for example, to cloud infrastructure providers), we take steps to ensure an adequate level of protection consistent with applicable law.</p>
<h2>8. Contact Our Data Protection Officer</h2>
<p>For questions, requests, or complaints regarding this policy, contact us at <a href="mailto:[email protected]">[email protected]</a> or via our <a href="/contact">Contact Page</a>.</p>