Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you contact us, request a consultation, or use our services. This may include your name, email address, phone number, company name, and details about your IT environment relevant to the services you request.

We may also collect technical information such as IP addresses, browser type, and pages visited when you use our website, using cookies and similar tracking technologies.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our cybersecurity services
• Communicate with you about your engagement, respond to inquiries, and send service updates
• Send security alerts, threat intelligence updates, and marketing communications (with your consent)
• Comply with legal obligations, including Kenya's Data Protection Act 2019
• Protect against fraud and unauthorized use of our services

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist in operating our business, subject to confidentiality agreements. We may also disclose information when required by law or to protect the rights and safety of our clients and staff.

All information obtained during security assessments and penetration tests is treated with the strictest confidentiality and is never shared with any party outside of the engagement without explicit written consent.

4. Data Security

Given our expertise in cybersecurity, we implement rigorous security measures to protect your information including end-to-end encryption, access controls, secure data storage, and regular security audits of our own systems. All sensitive engagement data is encrypted at rest and in transit.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. Assessment reports and engagement data are retained for a maximum of 3 years unless otherwise agreed in writing. You may request deletion of your data at any time.

6. Your Rights (Kenya Data Protection Act)

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent at any time
• Lodge a complaint with the Office of the Data Protection Commissioner

7. Cookies

Our website uses essential cookies to maintain site functionality. We do not use third-party advertising cookies. You can control cookie settings through your browser preferences.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice on our website or by email. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact Us

For privacy-related enquiries or to exercise your rights, please contact us at:

Netcaru Cyber Security Consultancy
Email: info@netcaru.co.ke
Phone: +254-701 471 573
Phone: +254-702 147 211
Nairobi, Kenya