Skip to content

Legal

Privacy Policy

Last updated 10 November 2026.

Draft. Pending legal review. This document has not been approved by counsel and must not be treated as final.

This policy explains how Vuvo Group handles personal data collected through group.vuvo.co.ke. It is written to meet the Data Protection Act, 2019 of Kenya and its regulations, which the Office of the Data Protection Commissioner (ODPC) enforces.

1. Who is responsible

The data controller is [[LEGAL_ENTITY_NAME]], trading as Vuvo Group, of Nairobi, Kenya. ODPC registration number: [[ODPC_REG]]. Contact for privacy matters: hello@vuvolabs.co.ke. Data protection officer: [[DPO_NAME]].

2. What we collect

When you send an enquiry we collect your name, email address, the company your enquiry concerns and your message. You may also give a phone number and organisation name. We also record the page you sent the form from and the time taken to complete it, which we use to filter out automated submissions.

This website does not set advertising cookies and does not currently use analytics tools. If that changes, this policy will be updated first.

3. Why we use it, and our lawful basis

  • To read and reply to your enquiry. Basis: your consent and steps you ask us to take before entering a contract.
  • To route your enquiry to the right Vuvo company. Basis: your consent.
  • To protect the site from abuse. Basis: our legitimate interest in security.

4. Who receives it

Enquiries are stored in a Google Sheet and notified by email through Google Workspace. Google acts as a processor for us. Your enquiry is shared with the Vuvo company you select. We do not sell personal data.

5. Transfers outside Kenya

Google may store data on servers outside Kenya. We rely on the safeguards the Data Protection Act requires for such transfers. Details: [[TRANSFER_SAFEGUARDS]].

6. How long we keep it

We keep enquiry records for [[RETENTION_PERIOD]], then delete them unless the law requires us to keep them longer.

7. Your rights

Under the Data Protection Act you may ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct data that is inaccurate;
  • delete your data;
  • stop or restrict our use of your data;
  • withdraw your consent at any time;
  • transfer your data to another provider, where this applies.

Write to hello@vuvolabs.co.ke. If you are not satisfied with our response you may complain to the ODPC at www.odpc.go.ke.

8. Security

We limit access to enquiry data to named staff and use the access controls of the services we rely on. No online service is entirely secure.

9. Children

This website is not directed at children. Do not send us personal data about a child without a parent or guardian's consent.

10. Changes

We will publish changes to this policy on this page and update the date at the top.