Privacy Policy

Last updated: 9 August 2025

SifaBrand Innovation (“SifaBrand”, “we”, “our”, or “us”) operates the website sifabrand.com and related pages (collectively, the “Site”). This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit or use the Site and our services.

We process personal data in accordance with Kenya’s Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021, and, where applicable, other laws such as the EU/UK GDPR.

1) Who we are & contact

Data Controller: SifaBrand Innovation
Registered/Postal Address: [Update your full address, Nairobi, Kenya] Email: info@sifabrand.com

If you have questions about this Policy or how we handle your data, contact us at the email above.

2) What we collect

We collect the following categories of information:

• Account & contact data – name, email address, phone number, company name, job title (e.g., when you fill a form, request a quote, or contact support).
• Content you submit – messages, project briefs, attachments, testimonials, or survey responses.
• Device & usage data – IP address, device IDs, browser type, operating system, referral URLs, pages viewed, links clicked, time spent, and general location (city/country) collected via cookies, pixels, and similar technologies.
• Transaction data – service selections, invoices, payments (note: we use third‑party processors; we do not store full card numbers on our servers).
• Marketing preferences – your choices about receiving newsletters, promotions, or updates.

We do not intentionally collect special categories of personal data (e.g., health, biometric, or political opinions). If you choose to provide such data, you consent to our processing for the purpose you submitted it.

3) How we use your data (purposes & legal bases)

We use personal data to:

• Provide and improve services (contract/performance; legitimate interests) – to deliver our products and services, manage accounts, provide support, and improve the Site and user experience.
• Communicate with you (contract; legitimate interests; consent) – to respond to inquiries, send service notices, and provide customer support.
• Marketing (consent; legitimate interests) – to send newsletters or promotions you opt into; you can unsubscribe at any time.
• Analytics & personalization (consent; legitimate interests) – to understand how visitors use the Site and personalize content.
• Security & fraud prevention (legitimate interests; legal obligation) – to protect the Site, our users, and our business.
• Legal compliance (legal obligation) – to comply with tax, accounting, and regulatory requirements, and to respond to lawful requests.

4) Cookies & similar technologies

We use first- and third‑party cookies, pixels, and local storage to operate the Site, analyze traffic, and personalize content and ads. Cookie types include:

• Strictly necessary – essential for site functionality and security.
• Performance/analytics – e.g., measuring page views and user flows.
• Functional – remembering choices such as language or forms.
• Advertising – used to show ads and measure their effectiveness.

You can manage cookies via our Cookie Preferences banner (where shown) or through your browser settings. Disabling some cookies may affect site functionality.

5) Advertising (AdSense) & third‑party partners

We use Google AdSense and may use related Google advertising products.

• Third‑party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this and/or other websites.
• Google’s advertising cookies enable Google and its partners to serve ads to you based on your browsing of this Site and other sites on the Internet.
• Users may opt out of personalized advertising by visiting Google Ads Settings (https://adssettings.google.com). You can also visit AboutAds choices (https://www.aboutads.info/choices) for other controls.
• For more information on how Google uses data from sites that use its services, see Google’s Privacy & Terms (https://policies.google.com/technologies/ads).

If you are in the EEA/UK, we will only use non‑essential cookies (including advertising cookies) with your consent via our cookie banner/manager. You can withdraw consent at any time via the banner settings.

Publisher disclosure (AdSense): We do not sell personal information. We may enable non‑personalized ads in some regions when consent is not provided, which rely on contextual information (e.g., page content, coarse location).

6) Analytics

We may use analytics tools (e.g., Google Analytics) to understand how the Site is used.

• Analytics sets cookies or uses similar technologies to collect usage data.
• You can opt out of Google Analytics by using the Google Analytics Opt‑out Browser Add‑on (https://tools.google.com/dlpage/gaoptout).

Where required by law, we will seek your consent before enabling analytics cookies.

7) Sharing your information

We share data with:

• Service providers/Processors – hosting, analytics, email delivery, customer support, payment processing, security, and advertising partners who process data on our behalf under contract.
• Business transfers – in connection with a merger, acquisition, or asset sale.
• Legal & compliance – to comply with laws or valid legal processes, or to protect rights, safety, and security.

We do not sell your personal data. We do not allow third parties to access your data for their own direct marketing without your consent.

8) International transfers

We are based in Kenya but work with global service providers. When personal data is transferred outside Kenya (or your country), we use appropriate safeguards such as contractual clauses, and we require recipients to protect data to comparable standards.

9) Data retention

We keep personal data only as long as necessary for the purposes described above (e.g., for the duration of a project or account plus a reasonable period), to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods may vary depending on the data category and legal requirements.

10) Your rights

Subject to applicable law (including Kenya’s DPA and, where applicable, GDPR), you have the right to:

• Be informed about how your data is used.
• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Object to certain processing, including direct marketing.
• Withdraw consent where processing is based on consent.
• Erase your data in certain circumstances (right to deletion).
• Data portability (receive your data in a usable format, where applicable).
• Complain to a supervisory authority.

If you are in Kenya and have concerns, you may contact the Office of the Data Protection Commissioner (ODPC). We encourage you to contact us first so we can address your concerns quickly.

To exercise your rights, email info@sifabrand.com. We may need to verify your identity before responding.

11) Children’s privacy

Our services are intended for adults. We do not knowingly collect personal data from children. Under Kenyan law, a child is a person under 18 years. If you believe a child has provided personal data to us, please contact us so we can take appropriate action. Where we knowingly process a child’s data (e.g., for educational services), we will seek parental/guardian consent as required.

12) Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls, and staff awareness. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

13) Links to other sites

Our Site may link to third‑party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of every site you visit.

14) Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top indicates when the latest changes were made. Material changes will be posted on this page and, where appropriate, notified to you.

15) How to contact us

If you have questions, requests, or complaints regarding this Policy or our data practices, contact:
Email: info@sifabrand.com
Address: [Update your full address, Nairobi, Kenya]

Quick publisher checklist (not part of the public page — remove before publishing)

• Replace address placeholders with your exact registered/postal address.
• Decide on your cookie banner solution (consent for EEA/UK; notice for others).
• If you use additional ad/analytics partners, add them by name in Sections 5 and 6.
• Link this page in your footer (Privacy Policy) and add a Terms of Service page next.