Each of our mobile apps has its own privacy policy that describes the data that app collects. You can find them in our Privacy Center. Where an app policy exists, it applies to your use of that app.
Who we are
Annan Digital Labs (“we”, “us” or “our”) is a software development company registered in Kenya under registration number BN-ZWSAQQ32. We are the data controller for personal information collected through annandigitallabs.us and through our direct business relationships.
Scope of this policy
This policy covers personal information collected when you:
- Visit or browse our website;
- Contact us by form, email, phone or messaging;
- Request a proposal, become a client or work with us as a partner or supplier;
- Apply for a job or internship with us.
Information we collect
Information you provide
- Contact details such as your name, email address, phone number and company name.
- Enquiry details such as the service you are interested in and information about your project.
- Business information needed to prepare proposals, contracts and invoices.
- Job application information such as your CV, portfolio and cover letter.
Information collected automatically
When you visit our website, our hosting provider may automatically record technical information such as your IP address, browser type, device type, pages visited and the date and time of your visit in server logs. This information is used for security and to keep the website running reliably. This website does not use advertising or cross-site tracking cookies. See our Cookie Policy for details.
How we use information
- To respond to your enquiries and provide the information or services you request;
- To prepare proposals, deliver projects, manage contracts and issue invoices;
- To provide support and maintain our relationship with clients;
- To evaluate job applications;
- To secure our website and systems, and to prevent fraud and abuse;
- To comply with legal, tax and accounting obligations.
We do not sell personal information, and we do not use it for automated decision-making that produces legal effects for you.
Legal bases for processing
Where data protection law requires a legal basis, we rely on: your consent (for example, when you submit our contact form); the performance of a contract or steps taken at your request before entering into one; our legitimate interests in running and securing our business; and compliance with legal obligations.
Sharing information
We share personal information only when necessary and with appropriate safeguards, including with:
- Service providers who host our website, deliver email, process form submissions or provide business software, under contractual confidentiality and data protection obligations;
- Professional advisers such as accountants and lawyers, where needed;
- Authorities when required by law or to protect our rights, users or the public;
- A successor business in the event of a merger, acquisition or sale of assets.
Client project data
When we build or maintain software for clients, we may process personal data on their behalf. In those cases the client is the data controller and we act as a data processor, handling that data only on the client’s documented instructions and under a written agreement.
Data retention
We keep enquiry information for up to 24 months after our last contact unless a business relationship develops. Client and financial records are kept for as long as required by Kenyan tax and company law. Unsuccessful job applications are deleted within 12 months unless you ask us to keep them on file.
Security
We protect information with encryption in transit (HTTPS), access controls, strong authentication, and regular software updates. Access to personal information is limited to people who need it to perform their work.
Your rights
Under the Kenya Data Protection Act, 2019, and other laws that may apply to you, such as the GDPR, you have the right to be informed about the use of your data, to access it, to object to its processing, to correct false or misleading data, to request deletion, and to data portability. You may also withdraw consent at any time.
To exercise these rights, email contact@annandigitallabs.us. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner in Kenya or with your local data protection authority.
International transfers
Some of our service providers may process data outside Kenya. When this happens, we ensure appropriate safeguards are in place as required by applicable law, such as contractual protections and providers with recognized security standards.
Children
Our website and business services are not directed to children under 13, and we do not knowingly collect their personal information. For children’s data in our apps, see the relevant app privacy policy.
Changes
We may update this policy to reflect changes in our practices or the law. The “Last updated” date above shows when it was last revised. Significant changes will be highlighted on this page.
Contact us
Annan Digital Labs
Attn: Data Protection
Ogango, Kibos Road, Kibos, Kisumu East, P.O. Box 2752 - 40100, Kisumu, Kenya
Email: contact@annandigitallabs.us
Phone: +254 143 276 663