Privacy Policy

1. Who is responsible

Duara Dev, of Norfolk Towers, Kijabe Street, Nairobi, is the data controller for personal data collected through this website and in the course of providing our services. You can reach us at contact@duara.dev.

2. What we collect

Information you give us: your name, email address, phone number, company and whatever you write in an enquiry or project form.

Information collected automatically: pages visited, approximate location derived from your IP address, device and browser type, and how you arrived at the site. This comes from Google Analytics and the Meta Pixel, and is collected when you visit the site. The Meta Pixel also lets us measure whether an advert brought you here and show you follow-up adverts on Meta’s platforms. Our Cookie Policy explains how to stop it.

Information from providing services: the account details, access credentials and technical information needed to build or manage what you have engaged us for.

3. Why we use it

To respond to your enquiry and to quote for work you have asked about.

To deliver the services you have engaged us for, and to manage the hosting, domains and email we look after on your behalf.

To invoice you and keep the accounting records the law requires us to keep.

To understand how the website is used, so we can improve it. This is measured in aggregate and is not used to identify individual visitors.

4. The lawful basis

Contract: processing needed to deliver services you have engaged us for.

Legitimate interests: responding to enquiries, running the business, and measuring website usage in aggregate so we can improve the site, where that does not override your rights. You can object to this, and our Cookie Policy explains how to stop analytics entirely.

Legal obligation: tax and accounting records we are required to retain.

5. Who we share it with

Service providers who process data on our behalf, including our website form provider, analytics provider, hosting infrastructure and, where relevant, domain registrars and email providers. Each acts on our instructions.

Professional advisers and authorities, where the law requires it.

We do not sell personal data, and we do not share it for anyone else's marketing.

6. Transfers outside Kenya

Some providers we rely on operate outside Kenya. Where personal data is transferred abroad we take reasonable steps to ensure it remains protected to a standard consistent with Kenyan data protection law.

7. How long we keep it

Enquiries that do not become projects: kept while there is a live conversation and for a reasonable period after, then deleted.

Client records: kept for the duration of the engagement and afterwards for as long as tax and accounting law requires.

Analytics data: retained for the period set in our analytics configuration.

8. Your rights

Under the Data Protection Act you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we have no continuing basis to keep it, object to processing based on legitimate interests including website analytics, and ask us to restrict processing while a concern is resolved.

Write to contact@duara.dev and we will respond within the statutory period. If you are not satisfied you may complain to the Office of the Data Protection Commissioner.

9. Security

We take reasonable technical and organisational measures to protect personal data, including restricted access, encryption in transit and keeping the systems we manage patched. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

10. Cookies

This website uses cookies, including Google Analytics. Which ones we set, how long they last and how to stop them are covered in our Cookie Policy.

11. Changes

We may update this policy. The date at the top shows when it last changed.