The short version
- This website does not use advertising trackers, analytics cookies or third-party tracking pixels.
- The free diagnosis tool runs entirely in your browser. What you type is not stored or sent to us unless you choose to send it.
- We only receive personal data when you contact us, or when you become a client.
- We never sell personal data.
- You can ask to see, correct or delete your data at any time by writing to allan.matano@pentalytics.co.
1. Who we are
Pentalytics (“Pentalytics”, “we”, “us”) provides AI solutions, automation, data analytics, business setup, technology sourcing and IT support. We are based in Nairobi, Kenya.
For the personal data described in this policy, Pentalytics is the data controller. When we handle personal data on behalf of a client as part of a project, the client is the data controller and we act as their data processor under a written agreement.
We process personal data in line with the Kenya Data Protection Act, 2019 and its regulations. Where it applies to you, we also respect the EU and UK General Data Protection Regulation (GDPR).
2. What we collect and why
| When | What we collect | Why, and our lawful basis |
|---|---|---|
| You contact us by WhatsApp, email or phone | Your name, phone number or email address, and whatever you tell us in your message | To reply and to discuss the services you asked about. Basis: your consent, and steps taken at your request before entering a contract. |
| You become a client | Contact details of you and your team, billing details, and project correspondence | To deliver the work, invoice you and support you afterwards. Basis: performance of a contract and legal obligations such as tax records. |
| We work with your business data | Only the data you give us access to for the project, which may include personal data about your customers or staff | To carry out your instructions as your data processor. We do not use this data for any other purpose. |
| You visit this website | Standard technical logs kept by our hosting provider, such as IP address, browser type and the pages requested | To deliver the site securely and to detect abuse. Basis: our legitimate interest in running a safe website. |
We ask only for what we need. We do not knowingly collect sensitive personal data through this website, and we ask that you do not send it to us unless a project requires it and we have agreed how it will be protected.
3. The free diagnosis tool
The diagnosis tool matches your sentence against a list of keywords inside your own browser. Nothing you type is transmitted to us or saved. If you press “Send this on WhatsApp” or “Email it instead”, your device opens that app with a message you can read and edit before you decide to send it.
4. Cookies and tracking
This website does not set advertising or analytics cookies, and it does not load third-party tracking scripts. Fonts and images are served from our own domain, so your browser is not sent to other companies simply because you opened a page.
If we ever introduce analytics, we will choose a privacy-respecting option, update this policy first, and ask for your consent where the law requires it.
5. Who we share data with
We do not sell personal data, and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our behalf:
- Vercel, which hosts this website and keeps short-lived server logs.
- Cloudflare, which provides our domain name services.
- WhatsApp (Meta) and our email provider, when you choose to contact us through them. Their own privacy policies apply to their platforms.
We may also disclose data where the law requires it, for example in response to a valid court order, or to our professional advisers under a duty of confidentiality.
6. Transfers outside Kenya
Some of our providers store data on servers outside Kenya. When personal data leaves Kenya, we rely on the conditions set out in Part VI of the Data Protection Act, 2019, such as appropriate safeguards with the recipient or your consent, and we limit the data transferred to what is necessary.
7. How long we keep data
- Enquiries that do not become projects: up to 24 months after our last contact, then deleted.
- Client records and invoices: for the duration of our relationship and afterwards for the period required by Kenyan tax and company law.
- Client project data we process for you: returned or securely deleted at the end of the project, as agreed in our contract.
8. How we protect data
We use technical and organisational measures appropriate to the risk. These include encrypted connections (HTTPS) across this website, access to client data limited to the people working on the project, strong authentication on our accounts, and secure deletion when data is no longer needed.
If a personal data breach occurs that is likely to put your rights at real risk, we will notify the Office of the Data Protection Commissioner within 72 hours of becoming aware of it, and we will inform the people affected without undue delay.
9. Your rights
Under the Data Protection Act, 2019, you have the right to:
- be informed of how your personal data is being used;
- access the personal data we hold about you;
- object to the processing of all or part of your personal data;
- have false or misleading data corrected;
- have false or misleading data about you deleted, and ask for erasure of data we no longer have a reason to keep;
- receive your data in a structured, commonly used format, or have it sent to another organisation (data portability);
- withdraw your consent at any time, where we rely on consent;
- not be subject to a decision based solely on automated processing that significantly affects you. We do not make such decisions.
To use any of these rights, email allan.matano@pentalytics.co with the subject “Data request”. There is no charge. We may ask you to confirm your identity before we act. We aim to respond to access requests within 7 days and to correction or deletion requests within 14 days.
If you are in the EU or the UK
You have equivalent rights under the GDPR, including the right to restrict processing and the right to complain to the data protection authority in the country where you live.
10. Complaints
Please talk to us first, and we will do our best to put things right. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) in Kenya:
- Online complaints: cie.odpc.go.ke
- Website: www.odpc.go.ke
- Email: info@odpc.go.ke
- Address: Britam Towers, 12th Floor, Hospital Road, Upper Hill, Nairobi. P.O. Box 30920-00100, Nairobi.
11. Children
Our services are for businesses. This website is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.
12. Marketing
We do not send marketing messages unless you have asked to receive them. Every message will include a simple way to opt out, and you can also opt out at any time by emailing us.
13. Changes to this policy
We will update this page when our practices change and revise the effective date above. If a change is significant, we will tell existing clients directly.
14. Contact us about privacy
Pentalytics, Nairobi, Kenya
Email: allan.matano@pentalytics.co
Phone or WhatsApp: +254 790 429 988