Legal

Privacy Policy

Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights under Kenyan and international data protection laws.

1. Introduction

Alphacent Inc. ("we", "us", or "our") operates alphacentinc.com and related services from Nairobi, Kenya. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit our website or use our services.

We are committed to protecting your personal data in accordance with the Kenya Data Protection Act 2019 (KDPA), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

2. Information We Collect

Personal Data You Provide

  • Contact information: Name, email address, phone number, and business details you provide through our contact forms, email, or WhatsApp.
  • Business information: Company name, website URLs, domain names, and service requirements related to your project.
  • Payment information: M-Pesa transaction details or other payment processing information handled by third-party providers.

Data Collected Automatically

  • Log data: IP address, browser type, operating system, referral URLs, and pages viewed.
  • Cookies and tracking: Technical data about your device and usage patterns (see our Cookie Policy).
  • Analytics: Aggregated usage statistics via Vercel Analytics to improve our website.

3. How We Use Your Information

We use your personal data for the following purposes:

  • To provide, maintain, and improve our services and website.
  • To communicate with you regarding your inquiries, projects, and support requests.
  • To process payments and manage client relationships.
  • To send you marketing communications, if you have opted in (unsubscribe at any time).
  • To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing (GDPR)

When the GDPR applies, our legal basis for processing your personal data includes:

  • Contract performance: To fulfill the terms of a service agreement with you.
  • Legitimate interests: For business operations, analytics, and service improvement where not overridden by your rights.
  • Consent: Where you have given clear permission for specific purposes.
  • Legal obligation: To comply with applicable laws and regulations.

5. Data Retention

We retain your personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. For client project data, we retain information for 24 months after project completion unless longer retention is required by law.

6. Data Sharing and Disclosure

We may share your information with:

  • Service providers: Third parties who assist us in delivering our services (hosting, analytics, payment processing).
  • Legal compliance: When required by law, court order, or to protect our rights and property.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, provided the receiving party agrees to honor this policy.

We do not sell, trade, or rent your personal data to third parties for marketing purposes.

7. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete personal data.
  • Erasure: Request deletion of your personal data (subject to legal obligations).
  • Restriction: Request limitation of processing under certain circumstances.
  • Data portability: Receive your data in a structured, machine-readable format.
  • Object: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: Withdraw previously given consent at any time.

To exercise these rights, contact us at hello@alphacentinc.com. We respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including Kenya and the United States. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted communications, secure servers, and access controls.

10. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top indicates the last revision. Material changes will be posted on this page.

Last updated: September 26, 2026

12. Contact Us

If you have questions about this Privacy Policy or our data practices: