Privacy Policy

1. Introduction and data controller

This policy explains how Brexion ("we", "us"), of Bungoma-Malaba Road 17, Bungoma 50200, Kenya, collects and handles personal data when you use this website or contact us. Brexion is the data controller for the purposes of the Data Protection Act, 2019. You can reach us at [email protected] or +254 55 2836014.

2. What data we collect

We collect data you provide directly through the contact form (name, email, phone, message) and data collected automatically through cookies, described in our Cookie Policy.

Data category	Purpose	Legal basis
Name, email, phone	Responding to enquiries, scheduling sessions	Consent / contract
Message content	Understanding and answering your enquiry	Consent
Cookie identifiers	Site function, and analytics/personalisation where permitted	Consent (except essential cookies, legitimate interest)

3. Purposes and legal basis

We process personal data to respond to enquiries, arrange and deliver sessions, and maintain the basic functioning and security of this website. Where processing depends on consent — such as optional cookie categories — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data sharing and third parties

We do not sell personal data. We do not share material discussed during sessions with any third party without your explicit agreement. Data may be disclosed where required by Kenyan law or a valid order of a competent authority.

5. Retention

Contact form submissions and related correspondence are retained only as long as needed to respond to your enquiry and, where a session takes place, for a reasonable period afterward for our own records. You may request earlier deletion at any time.

6. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or loss, proportionate to the nature of the data involved.

7. International transfers

We do not routinely transfer personal data outside Kenya. If this ever becomes necessary, we will only do so in a manner consistent with the transfer safeguards required under the Data Protection Act, 2019.

8. Your rights

Under the Data Protection Act, 2019, and subject to its exceptions, you have the right to be informed of the use of your data, to access it, to request correction or deletion, to object to processing, and to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled. To exercise any of these rights, contact us via our contact page.

9. Opt-out and data deletion

Providing personal data to us is always optional; withholding it may simply mean we are unable to respond to a particular enquiry. Cookies can be disabled or adjusted at any time through the preferences panel on our Cookie Policy page or your browser settings. You may request deletion of your data at any time via the contact page.