Privacy Policy

1. Scope & Controller

This policy applies to all personal data processed by Spectlance Digital Ltd in connection with our website (spectlance.com) and the services we provide to clients.

Spectlance Digital Ltd is the data controller responsible for your personal data. We are incorporated in Kenya and operate in compliance with the Kenya Data Protection Act 2019 and its accompanying regulations.

2. Data We Collect

We collect information in the following ways:

Information you provide directly

• Contact form submissions: first name, last name, phone number, email address and message content.
• Client engagements: business name, contact details and project-related information shared during our service delivery.

Information collected automatically

• Usage data: pages visited, time spent, referring URL, browser type, device type and IP address — collected via Google Analytics.
• Interaction data: page-view events, button clicks and session data collected via Facebook Pixel and the Facebook Customer Chat widget.
• Cookies & similar technologies: see the Cookies section below.

Information we do not collect

We do not knowingly collect sensitive personal data (such as health, financial account, or government ID information) through this website. If you share such information in a message to us, we will treat it with the highest level of confidentiality.

3. How We Use Your Data

We use the information we collect to:

• Respond to your enquiries and communicate with you about our services.
• Deliver, maintain and improve our website and services.
• Understand how visitors interact with our website (via analytics) so we can improve the user experience.
• Send service-related communications such as responses to your messages.
• Comply with legal obligations, resolve disputes and enforce our agreements.

Legal basis (Kenya DPA 2019): We process your data on the basis of your consent (where provided), our legitimate interest in operating and improving our business, and the performance of a contract where you engage us for services.

4. Sharing & Disclosure

We do not sell, rent or trade your personal data. We may share it only in these limited circumstances:

• Service providers: third parties that help us operate our website and services (e.g. our email hosting provider), who are bound by data protection agreements.
• Analytics & advertising partners: Google (Google Analytics) and Meta (Facebook Pixel) — see Third-Party Services.
• Legal requirements: when required by law, court order or government authority.
• Business transfers: in the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction, and you will be notified.

5. Third-Party Services

Our website uses the following third-party services that may collect data independently:

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Contact form submissions: retained for up to 2 years to allow us to follow up on enquiries and maintain communication history.
• Analytics data: retained per the default retention settings of Google Analytics (up to 26 months).
• Client project data: retained for the duration of the client engagement plus a reasonable period for legal and business purposes (typically 7 years).

You may request deletion of your data at any time via our Data Deletion page.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include SSL/TLS encryption, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data. Use our Data Deletion page or email us directly.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@spectlance.com or contact@spectlance.com. We will respond within 30 days.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).

9. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small files placed on your device that help us improve your experience and analyse website traffic.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website.

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at privacy@spectlance.com and we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this page periodically.

For material changes, we will endeavour to notify users via email or a prominent notice on our website.

12. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or our data practices, please contact: