Privacy Policy

1. Introduction and data controller

This policy explains how Fenvora ("we", "us") collects and handles personal data submitted through this website. The data controller is Fenvora, Ngong Road 388, Nairobi 00505, Kenya, reachable at [email protected]. This policy is written in line with Kenya's Data Protection Act, 2019, and the guidance of the Office of the Data Protection Commissioner (ODPC).

2. What data is collected

We collect data you provide directly through our contact form — name, email address, phone number, and message content — and data collected automatically through cookies, described in our Cookie Policy.

Data category	Purpose	Legal basis
Contact form details	Responding to your enquiry	Consent
Cookie identifiers	Site functionality and, where permitted, analytics	Consent / legitimate interest (essential only)

3. Purposes and legal basis

We process your data to respond to enquiries, arrange sessions you request, and maintain basic site functionality. Where processing relies on consent — such as optional cookie categories — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data sharing and third parties

We do not sell personal data. Data submitted through the contact form is used solely by Fenvora to respond to your enquiry and is not shared with third parties except where required by law.

5. Retention

Contact form submissions are retained only as long as necessary to respond to your enquiry and for a reasonable period afterward for record-keeping, after which they are deleted.

6. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, consistent with the standards expected under the Data Protection Act, 2019.

7. International transfers

Where any data is processed outside Kenya, we take steps to ensure it receives an adequate level of protection consistent with the Data Protection Act, 2019.

8. Your rights

Under the Data Protection Act, 2019, you have the right to access, correct, or delete your personal data, to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise these rights, contact us via the contact page.

9. Opt-out and data deletion

Providing personal data through our forms is always optional, though it may limit our ability to respond to your enquiry. Cookies can be disabled or adjusted at any time through your browser settings or our cookie preferences panel. To request deletion of data we hold about you, please contact us via the contact page.