Privacy Policy

1. Introduction

This Privacy Policy explains how Gotendia collects, uses, stores, shares and protects personal data when you visit or use https://www.gotendia.com, when you engage our services, or otherwise interact with us (the "Services"). It also explains your rights and how to exercise them.

2. Scope

This Policy applies to all individuals ("data subjects") whose personal data we process in connection with the Services, including visitors to our website, prospective and existing clients, contractors, job applicants, suppliers and members of the public.

3. Controller

For the purposes of applicable data protection law, Gotendia is the data controller in respect of the processing described here unless otherwise stated. Contact: hello@gotendia.com.

4. Personal Data We Collect

• Identity & contact data: name, job title, company, address, email, phone.
• Account & contractual data: records of communications, purchase history, invoices, payment identifiers.
• Technical & usage data: IP address, device identifiers, browser, OS, pages visited, cookies.
• Communications data: correspondence, support tickets.
• Sensitive data: processed only with explicit consent or as permitted by law.

5. How We Collect Personal Data

• Directly from you (forms, contracts, emails, calls).
• Automatically via our website (cookies, logs).
• From third parties (payment providers, partners, public registries).

6. Legal Bases for Processing

We rely on contract performance, consent, legal obligations, and legitimate interests as permitted by law.

7. Purposes of Processing

To provide and maintain services, process orders and payments, communicate with you, perform verification, comply with obligations, personalize content, and manage recruitment and supplier relationships.

8. Sharing and Disclosure

We may share data with:

• Service providers and processors under contractual safeguards.
• Professional advisers.
• Affiliates or acquirers in case of business transfer.
• Public authorities as required by law.

9. International Transfers

Where transfers outside Kenya occur, appropriate safeguards will be implemented (SCCs, adequacy findings, or explicit consent).

10. Data Retention

We retain personal data only as long as necessary or as required by law (e.g., 6–7 years for contracts).

11. Security

We apply administrative, technical and physical safeguards (encryption, access controls, secure hosting).

12. Data Subject Rights

You may request access, rectification, erasure, restriction, portability, or withdraw consent. Contact: hello@gotendia.com.

13. Data Breach Notification

We will notify relevant authorities and affected data subjects without undue delay when legally required.

14. Children

We do not knowingly collect data from children under 18.

15. Changes

We may update this Policy periodically. The effective date reflects the last update.

16. Contact & Complaints

Contact: hello@gotendia.com. Complaints may be filed with the Office of the Data Protection Commissioner, Kenya.