# Privacy Policy Last updated: April 15, 2026 **The short version (a plain summary, not a replacement for the full policy below).** Your privacy matters to us. This policy explains, in plain English, what personal information tecMAMBO collects, why we collect it, and what you can do about it. In short: if you sign up for a newsletter or message us, we use the details you give us for those purposes; when you browse, we and our partners use cookies and similar tools to keep the site working, understand what is read, and show advertising, and you can control much of this through your cookie choices; we do not sell your personal information for money; and you have rights over your data, including the right to access it, correct it, or ask us to delete it. The full policy follows, and it is the one that legally applies. ## Complete before publishing This template needs legal review and these CMS fields completed before launch. - [Legal Entity Name] - [registration number] - [registered address] - [privacy contact email] - [Data Protection Officer name or role] - [verify and insert ODPC website and contact details] ## 1. About this policy and who we are This Privacy Policy explains how tecMAMBO collects, uses, shares, and protects personal data when you visit our website, read our content, subscribe to our newsletters, or otherwise interact with us (together, the "Service"). For the purposes of the Data Protection Act, 2019 of Kenya (the "Act") and other applicable data protection law, the data controller responsible for your personal data is [Legal Entity Name], a company registered in Kenya under registration number [registration number], with its registered office at [registered address] ("we", "us", or "our"). "Personal data" means any information that relates to an identified or identifiable person. By using the Service, you acknowledge that you have read and understood this policy. This policy should be read together with our [Cookie Policy](/cookies) and our [Terms of Use](/terms). ## 2. The personal data we collect We collect the following categories of personal data: Information you give us directly. This includes your email address when you subscribe to a newsletter, and any information you provide when you contact us, ask a question through an "Ask MAMBO" feature, suggest a Glossary term, leave a comment, respond to a survey, or otherwise communicate with us. This may include your name, your email address, and the content of your message. Information we collect automatically when you use the Service. This includes your device and browser type, operating system, IP address, general location inferred from your IP address, the pages and articles you view, the links you click, the date and time of your visit, the website or source you arrived from, and similar usage and diagnostic information. We collect this through cookies, pixels, local storage, server logs, and similar technologies, as described in our [Cookie Policy](/cookies). Information from third parties. We may receive information about you from analytics providers, advertising partners, and platforms you use to interact with us, such as social media networks, in line with their own terms and your settings on those services. We do not intentionally collect special categories of personal data (such as data about your health, religion, or political views) through the Service, and we ask that you do not send us such data. ## 3. How we collect your personal data We collect personal data when you provide it to us directly, for example by subscribing to a newsletter or sending us a message; automatically as you browse and interact with the Service, through cookies and similar technologies; and occasionally from third parties such as our analytics and advertising partners. Where the law requires your consent for a particular form of collection, such as certain cookies, we will ask for it and you can withdraw it later. ## 4. Cookies and similar technologies We and our partners use cookies and similar technologies to operate the Service, remember your preferences, measure how the Service is used, and deliver and measure advertising. Where required by law, we ask for your consent before placing non-essential cookies, and you can manage your choices through our [consent tool](/cookies#manage-cookie-preferences) and your browser settings. For full details of the cookies we use and how to control them, please see our [Cookie Policy](/cookies). ## 5. How and why we use your personal data, and our lawful bases We use your personal data for the following purposes, relying on the lawful bases recognised under the Act: To provide, operate, and maintain the Service, including delivering pages, content, and the Glossary to you. Our lawful basis is our legitimate interest in running and improving our publication, and, where relevant, the performance of our agreement with you under our [Terms of Use](/terms). To send you newsletters and updates you have asked for. Our lawful basis is your consent, which you can withdraw at any time. To respond to your questions, comments, suggestions, and other messages. Our lawful basis is our legitimate interest in communicating with our readers, and your consent where you have provided it. To publish and moderate comments and other content you choose to submit. Our lawful basis is our legitimate interest in operating community and feedback features and keeping them safe and lawful. To understand how the Service is used and to improve it, through analytics and measurement. Our lawful basis is your consent where required for the relevant cookies, and otherwise our legitimate interest in understanding and improving our content and performance. To display advertising, including personalised advertising where you have consented, and to measure its performance. Our lawful basis is your consent for personalised advertising and related cookies, and our legitimate interest in funding the Service through advertising that is not personalised. To operate affiliate links and report resulting referrals. Our lawful basis is our legitimate interest in funding the Service. To keep the Service secure, prevent and detect fraud, abuse, and security incidents, and enforce our [Terms of Use](/terms). Our lawful basis is our legitimate interest in protecting the Service, our users, and our rights, and compliance with our legal obligations. To comply with our legal obligations and to respond to lawful requests from public authorities. Our lawful basis is compliance with a legal obligation. Where we rely on legitimate interests, we balance those interests against your rights and freedoms, and you may object to that processing as described below. ## 6. Advertising, analytics, and your choices tecMAMBO is funded in part by advertising and analytics that help us understand our audience. We work with third-party advertising and measurement partners, which may include advertising networks and platforms, who may use cookies, advertising identifiers, and similar technologies to collect information about your activity in order to deliver and measure advertising. Where personalised advertising and non-essential analytics require your consent, we collect it through our [consent management tool](/cookies#manage-cookie-preferences), and you can change or withdraw your choices at any time. You can also use the privacy and advertising settings offered by your browser and device. Some of our content contains affiliate links, and if you click them and make a purchase, the retailer may receive information about that referral, as explained in our [Terms of Use](/terms) and [Cookie Policy](/cookies). ## 7. When and with whom we share personal data We do not sell your personal data for money. We share personal data only as described in this policy, including with the following recipients: Service providers and processors who perform services on our behalf, such as website hosting, content delivery, email and newsletter delivery, analytics, search, and customer communication. These providers act on our instructions and are bound by appropriate confidentiality and data protection obligations. Advertising and measurement partners, subject to your consent where required, to deliver and measure advertising on the Service. Affiliate partners and retailers, where you choose to follow an affiliate link, so that a resulting purchase can be attributed. Public authorities, regulators, courts, and law enforcement, where we are required to do so by law, or where disclosure is necessary to protect our rights, your safety, or the safety of others. Professional advisers, such as our lawyers, accountants, and insurers, where necessary. A buyer or successor, in connection with a merger, acquisition, financing, reorganisation, or sale of assets, in which case personal data may be transferred as part of that transaction, subject to this policy. ## 8. International transfers of personal data Some of the service providers and partners we work with are located outside Kenya, which means your personal data may be transferred to, stored in, or processed in other countries. Where we transfer personal data outside Kenya, we take the steps required by the Act to ensure that your data continues to be protected, which may include transferring to countries or recipients that provide an adequate level of protection, putting appropriate contractual safeguards in place, or relying on another lawful basis for the transfer, such as your consent. You may contact us for more information about the safeguards we use. ## 9. How long we keep personal data We keep personal data only for as long as is necessary for the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. For example, we keep your newsletter subscription data until you unsubscribe and for a reasonable period afterwards to honour your choice, we keep messages you send us for as long as needed to handle your request and for our records, and we keep usage and log data for a limited period for security and analytics. When we no longer need personal data, we delete it or anonymise it so that it can no longer be associated with you. ## 10. How we protect personal data We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption in transit, access controls, and limiting access to those who need it. No method of transmission over the internet or method of storage is completely secure, so while we work to protect your personal data, we cannot guarantee its absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will act in accordance with the Act, including notifying the Office of the Data Protection Commissioner and, where required, affected individuals. ## 11. Your data protection rights Subject to the conditions and exceptions in the Act, you have rights in relation to your personal data, which may include the right to be informed of how your data is used, the right to access the personal data we hold about you, the right to ask us to correct personal data that is inaccurate or misleading, the right to ask us to delete personal data in certain circumstances, the right to object to or restrict certain processing, the right to data portability where it applies, and the right to withdraw your consent at any time where we rely on consent. Where we rely on your consent, withdrawing it does not affect the lawfulness of processing carried out before you withdrew it. To exercise any of these rights, please contact us using the details in Section 17. We may need to verify your identity before acting on your request, and we will respond within the timeframes required by the Act. Exercising these rights is free of charge in most cases. ## 12. Marketing and newsletters If you have subscribed to a tecMAMBO newsletter, we will send you the communications you signed up for. You can unsubscribe at any time by using the unsubscribe link in any email we send, or by contacting us. Unsubscribing from marketing communications does not affect any service-related messages we may need to send you, or the lawfulness of communications sent before you unsubscribed. ## 13. Children's privacy The Service is intended for a general audience and is not directed at children under the age of 18. We do not knowingly collect personal data from a child without the consent of a parent or guardian where such consent is required by law. If you are a parent or guardian and you believe that a child has provided us with personal data without appropriate consent, please contact us so that we can take appropriate steps to address it, including deleting the data where required. ## 14. Automated decision-making and profiling We do not make decisions that produce legal effects concerning you, or that similarly significantly affect you, based solely on automated processing. Some of our advertising partners may use profiling to show advertising they consider relevant to you, and this takes place subject to your consent and the choices available through our consent tool and your device settings, as described in our [Cookie Policy](/cookies). ## 15. Third-party websites and services The Service contains links to third-party websites, products, and services, including those of advertisers, affiliates, sponsors, and the companies we write about. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party site or service you visit. ## 16. Changes to this policy We may update this policy from time to time, for example to reflect changes to the Service, to our partners, or to the law. When we do, we will revise the "Last updated" date at the top of this page, and where the changes are significant we will take reasonable steps to bring them to your attention. We encourage you to review this page periodically. ## 17. How to contact us and our Data Protection Officer If you have any questions about this policy, or if you would like to exercise your data protection rights, you can contact us at [privacy contact email], or by writing to [Legal Entity Name], [registered address]. Our data protection contact is [Data Protection Officer name or role], who can be reached at the same address. We are based in Nairobi, Kenya. ## 18. How to complain We hope to resolve any concern you have about how we handle your personal data. If you are not satisfied, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya, whose current contact details are published on its official website at [verify and insert ODPC website and contact details]. We would, however, appreciate the chance to address your concerns before you approach the regulator, so please consider contacting us first.