Privacy Policy

1. Who we are

This policy explains how Haileseed Ltd ("Haileseed", "we", "us") handles personal data. Haileseed Ltd is a private limited company registered in Kenya (Company No. PVT-RQ13DVW5), with its registered office at Kisumu Miwani Road, Mamboleo, Kisumu, and postal address P.O. Box 3883 – 40100, Kisumu, Kenya. We are the data controller for the personal data described in this policy.

2. Scope

This policy covers our website, haileseed.com, and your communications with us by email or telephone. Each mobile application we publish will have its own privacy policy describing the data that app handles, which will be linked from the app's store listing. Where an app policy and this policy differ, the app policy applies to that app.

3. Data we collect

• Information you send us: when you email or call us, we receive your name, contact details and anything you choose to include in your message.
• Technical data: like most websites, our hosting and security providers automatically record basic technical information when you visit, such as your IP address, browser type, and the date and time of your visit. This is used for security and to keep the site running.

This website does not use advertising, analytics or tracking cookies, and does not ask you to create an account.

4. How we use your data

• To respond to your enquiries and provide the services you request.
• To protect the website and our systems against abuse and attacks.
• To meet our legal, tax and regulatory obligations.

We do not sell personal data, and we do not use it for advertising.

5. Legal basis

We process personal data in line with the Data Protection Act, 2019 (Kenya). Depending on the situation, we rely on your consent, on steps needed to enter into or perform a contract with you, on compliance with a legal obligation, or on our legitimate interest in operating and securing our services.

6. Service providers

We use a small number of trusted providers to run our website and communications. They process data on our behalf only as needed to provide their service:

• Website hosting: Safaricom PLC (Kenya).
• Security and content delivery: Cloudflare, Inc. (global network).
• Email: Proton AG (Switzerland).
• Web fonts: Google Fonts (Google LLC), which receives your IP address when the page loads its typefaces.

Some of these providers process data outside Kenya. Where this happens, we rely on providers that apply appropriate safeguards for personal data.

7. How long we keep data

We keep correspondence for as long as needed to deal with your enquiry and any follow-up, and longer only where the law requires it (for example, business and tax records). Technical logs held by our providers are kept for limited periods set by those providers.

8. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be informed of how your personal data is used;
• access the personal data we hold about you;
• object to processing of all or part of your personal data;
• have inaccurate or misleading data corrected; and
• have false or misleading data deleted.

To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

9. Children

This website is intended for adults and businesses and is not directed at children. Any app we publish for children will follow the applicable law and the app store rules for children's apps, and its own privacy policy will explain how it protects young users.

10. Security

The website is served over an encrypted (HTTPS) connection, and we use reputable providers with strong security practices. No method of transmission or storage is completely secure, but we take reasonable steps to protect personal data.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the effective date shown at the top.

12. Contact us