Privacy Policy
This Privacy Policy explains in plain, honest language what personal data HarLyn Digital Partners collects through this website, why we collect it, how it is protected, and how you can exercise your statutory rights under Kenya's Data Protection Act (KDPA 2019).
01Who We Are
This website is operated by HarLyn Digital Partners, a specialized engineering and cybersecurity consultancy based in Kenya, founded by Harrison Ndeke (AI & Systems Lead) and Nazline Mwita (Cybersecurity Assurance Lead).
Under Kenya's Data Protection Act (KDPA) 2019, HarLyn Digital Partners is the data controller for personal data collected through this website. A data controller is the legal entity that determines the purposes and means of collecting and processing your personal data.
02What We Collect
We collect only the specific items of personal data verified in our website codebase. We do not collect unneeded background information or hidden device telemetries. Specifically, we collect:
- Contact & Booking Forms: When you complete our contact form, booking modal, or 48-Hour Assessment tool, we ask for:
- Your full name
- Your business or personal email address
- Your phone or WhatsApp number (if provided)
- Your company or organisation name (if provided)
- Your selected service interest or budget tier (if selected)
- Your project brief or message describing your requirements
- Your selected operational challenges or bottlenecks (if using our assessment tool)
- AI Chatbot Queries: What you type into the on-site assistant during an active session is processed to provide immediate technical answers.
- Basic Website Request Data: Standard HTTP request data (such as your IP address, browser user-agent, and requested page URL) transmitted automatically by your browser to our cloud edge hosting provider (Vercel) to deliver web pages securely.
03Why We Collect It
We collect personal data strictly for legitimate operational purposes tied directly to each item:
04What We Do NOT Do With Your Data
We make the following explicit commitments:
- We do not sell personal data: We have never sold personal data, and we will never sell, lease, or monetize your personal information to data brokers or advertising networks.
- No unsolicited marketing: We do not add your email to third-party marketing newsletters or cold sales funnels.
- Strictly verified subprocessors: We share your data only with the specific technical infrastructure providers verified in our code, solely to deliver this website and process your inquiry:
05How We Protect It
Security is a core discipline at HarLyn. Our cybersecurity practice is led by Nazline Mwita. We apply the following technical and operational measures to protect your information:
- Encrypted Transport: All website traffic, form transmissions, and API calls enforce HTTPS with TLS 1.3 encryption in transit.
- Restricted Founder Access: Inquiry emails are delivered directly and exclusively to founders Harrison Ndeke and Nazline Mwita. No third-party contractors or unvetted staff have access.
- Environment Vaulting: All server credentials and API keys are stored in encrypted environment vaults with least-privilege role boundaries; zero hardcoded secrets exist in client code.
- Zero Persistent Chat Logs: Chatbot interactions are not written to a website database.
Note: No honest security consultancy can guarantee “100% unhackable” security over the public internet. However, we implement robust, defense-in-depth safeguards aligned with industry standards to protect your data.
06How Long We Keep It
We retain personal data only as long as necessary to fulfill the purposes for which it was collected:
07Your Rights Under the Kenya Data Protection Act (KDPA) 2019
As a data subject (the individual whose personal data is collected), you have specific statutory rights under Part IV of Kenya's Data Protection Act 2019:
How to exercise your rights: Send an email to info@harlyndigitalpartners.co.ke with the subject line “KDPA Data Subject Request”. We will acknowledge and respond within statutory timelines without fee.
Right to Lodge a Complaint: If you believe your rights under the KDPA 2019 have been infringed, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya (odpc.go.ke).
08Cookies & Local Storage
This website uses strictly necessary, functional cookies and HTTP headers only (such as routing headers utilized by our hosting platform Vercel to securely serve web assets).
We do NOT use marketing cookies, tracking pixels (such as the Meta Pixel or TikTok Pixel), or third-party behavioral analytics scripts on this website. Our website functions entirely without non-essential tracking cookies.
09Client Project Data is Separate
This Privacy Policy applies specifically to information collected through our public website.
When a business engages HarLyn Digital Partners for a paid consulting project, system build, or 48-Hour Assessment Sprint, all proprietary source code, operational databases, customer credentials, and client documentation are governed by that engagement's specific Non-Disclosure Agreement (NDA), Master Services Agreement (MSA), and technical Rules of Engagement, not just by this website policy.
10Children's Privacy
Our website and engineering services are created for commercial businesses, organizations, and adult professionals. We do not knowingly solicit, collect, or process personal data from children under the age of 18. If you believe a minor has submitted personal data to us, contact us at info@harlyndigitalpartners.co.ke and we will delete it promptly.
11Changes & Effective Date
We may update this Privacy Policy periodically to reflect technical changes in our codebase, infrastructure improvements, or updates to Kenyan statutory regulations. The current version will always be accessible directly at this URL: https://www.harlyndigitalpartners.co.ke/privacy-policy.