BearStack / Legal
Privacy policy
What we collect, why we need it, and the choices you have.
At a glance
An enquiry gives us enough information to understand your website and reply. We do not use analytics, advertising pixels or newsletter tools on this website.
Who this policy covers
This website is operated by Bearstack, at The Piano, Westlands, Nairobi, 00100, Kenya. BearStack provides website care, hosting, rescue, migration and growth services. This policy explains how we handle personal information when you visit our website, contact us or discuss work with us. Contact us at support@bearstack.ke about privacy or to exercise your rights.
We use Kenya’s Data Protection Act, 2019 and its applicable regulations as the basis for this policy. For enquiries and our own business records, BearStack determines why and how information is used. When we handle information on a client’s website under their instructions, the client normally determines those purposes; the relevant service and data processing agreement governs that work.
Information we receive
The enquiry form asks for your name, email address, request type and message. Your website address is optional. The enquiry also identifies the page and form used, so we can understand the service you need. We also receive information you send directly by email and correspondence needed to discuss or deliver a service. Please do not send passwords, payment card details or sensitive personal information through the enquiry form.
Our website server receives technical information needed to serve requests, such as your IP address, browser information, requested address and request time. Hosting and security logs may record this information. The contact form uses a keyed hash derived from your IP address to limit repeated submissions; it does not save the raw IP address or your message in that rate-limit record.
Your browser can store a motion preference and a session flag for the homepage introduction. Some fonts are requested from Google’s font servers, which receive connection information such as your IP address and browser headers. See our Cookies policy for the storage details.
Why we use information
We use enquiry details to reply, understand your request, prepare a scope of work and take steps you ask us to take before entering a contract. Where you engage us, we use relevant information to deliver the agreed service and manage that contract.
We use limited technical information to operate the website, prevent spam, investigate faults and protect our systems. Where we rely on legitimate interests, we assess those interests against your rights. We also process information where necessary to meet a legal obligation. If a separate activity requires consent, we ask for it and explain how to withdraw it.
Submitting an enquiry does not subscribe you to marketing. We currently have no newsletter tool, analytics tool or advertising pixel on this website. We do not sell enquiry information or use it for automated decisions with legal or similarly significant effects.
How long information stays
We keep information for the purpose for which it was collected, including responding to an enquiry, carrying out agreed work and meeting legal recordkeeping requirements. Retention depends on the type of record, whether you become a client, and any legal obligation or dispute that requires preservation. We review information and delete or anonymise it when it is no longer needed.
The contact form’s rate-limit record expires ten minutes after the latest accepted submission attempt. Messages delivered by email remain in the receiving mailbox under its retention arrangements. Deleting a rate-limit record does not delete an email. Browser storage has the separate lifetimes described in our Cookies policy.
Keeping information secure
We take reasonable technical and organisational steps appropriate to the information and risk, including limiting access and using the form’s validation and spam controls. No website, email channel or storage system can guarantee absolute security. If you need to share credentials or sensitive information for a service, contact us first to agree a suitable channel.
Your rights and requests
Subject to the conditions and exceptions in applicable law, you can ask to be informed about the use of your personal information, access it, correct inaccurate information, delete information that should no longer be kept, object to processing, restrict processing or receive a portable copy where that right applies. If processing is based on consent, you can withdraw it without affecting earlier lawful processing.
Email support@bearstack.ke with your request. We may ask for information needed to verify your identity or understand the request. We respond within the time required by the applicable law and explain any lawful limitation.
You can raise a concern with us or complain directly to Kenya’s Office of the Data Protection Commissioner. Contacting us first is not a condition of making a complaint.
Children and other websites
Our website is intended for people seeking business website services. We do not knowingly seek personal information from children. If you believe a child has provided information, contact us so we can assess and address it.
Links to another website take you to that operator’s service and privacy practices. This policy does not cover websites operated by our clients or other organisations.
Changes and contact
We update this policy when our information practices change. The date at the top identifies the latest revision; material changes will be brought to your attention where required. For questions, email support@bearstack.ke.