Privacy Policy

We process personal data in line with the Kenya Data Protection Act, 2019 and its accompanying regulations.

We collect information you provide directly to us when filling out our contact form: your name, email address, phone number (if provided), the topic you select, your message, and the page you submitted it from.

We also receive information when you choose to message us on WhatsApp or write to us by email.

Our hosting provider automatically logs basic technical data required to securely operate and deliver the site, such as IP address, browser type and requested pages. We don't use advertising or tracking cookies on this website.

We process your personal data for clear, lawful reasons:

• To reply to your enquiry and prepare a proposal: based on your consent and steps taken at your request before entering into a contract.
• To run, secure and improve the website: under our legitimate business interest in delivering reliable, safe digital services.
• To meet legal and accounting obligations: if you become a client, to comply with statutory Kenyan record-keeping requirements.

We only share your data with trusted service providers who process information on our behalf to help run our business: Formspree (for delivering contact form enquiries), Vercel (our website hosting infrastructure), and Meta/WhatsApp when you choose to communicate via WhatsApp.

We never sell, rent or trade your personal data to any third parties.

Links to our products (SmartChama and the Gikuyu AI Translator) take you to separate websites with their own privacy policies.

Some of our infrastructure providers store data outside Kenya (for example, in cloud facilities in the United States or Europe). Where cross-border transfers occur, we rely on contractual and security safeguards established by our providers, consistent with the requirements of the Kenya Data Protection Act.

Enquiries that do not lead to an active client engagement are retained for up to 12 months and then securely deleted.

Client records and project communications are retained for the duration of the commercial relationship, plus any additional period mandated by Kenyan accounting and tax law.

Under the Kenya Data Protection Act, you have the right to be informed about how your data is used; to request access to your personal data; to object to processing; to request correction of inaccurate data; to request deletion of false or misleading information; and to withdraw consent at any time.

To exercise any of these rights, email us at info@neurogrowthtech.com. We will respond within a reasonable time and may ask you to verify your identity.

If you have questions or concerns about how we handle your personal data, please contact us first so we can resolve the matter. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya at www.odpc.go.ke (opens in a new tab).

We implement reasonable technical and organisational security measures, including HTTPS encryption in transit and restricted internal access to enquiries. However, no method of transmission over the internet or electronic storage is completely secure.

Our website and services are intended exclusively for businesses and adult professionals. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When changes occur, we will update the "Last updated" date at the top of this page. Significant modifications will be clearly noted on the site.