Privacy Policy

Who I am

Joseph Gitonga ("I" or "me") operates this site and provides consulting services directly to clients.

This privacy policy explains what personal information I collect, how it is used, and the choices you have. It applies to the website, contact forms, direct email exchanges, and any discovery materials you share ahead of a project.

What we collect

• Contact details you provide (name, email, phone, organisation).
• Discovery information you share about your product, users, infrastructure, or objectives.
• Usage metadata from this site (pages visited, referrer, device type) collected via privacy-conscious analytics tools such as Vercel Web Analytics or PostHog.
• Operational data from active projects when necessary to deliver agreed services.

How we use information

• Respond to enquiries, schedule discovery sessions, and prepare proposals.
• Deliver consulting, engineering, or fractional leadership services as contracted.
• Improve site content, service offerings, and onboarding processes.
• Comply with legal or regulatory requirements applicable to me as an independent consultant.

Legal basis

We process personal data on one or more of the following bases: your consent, preparation for or performance of a contract, legitimate interests in improving services, and compliance with legal obligations in relevant jurisdictions.

Sharing and retention

• We do not sell personal information.
• Trusted sub-processors (for example, cloud hosting, analytics, or accounting tools) may access data strictly to support service delivery. Each provider is vetted for security and privacy controls.
• Project data is retained for the duration of the engagement plus a reasonable archival window (typically up to 24 months) unless law or contract requires a longer period.
• You may request deletion of non-statutory data at any time; we will confirm once removal is complete.

Cookies and similar technologies

This site uses minimal cookies and analytics scripts to understand aggregate usage. You can adjust browser settings to block cookies; doing so will not materially affect access to core content.

Your rights

• Request access to the personal data we hold about you.
• Ask for corrections or updates to inaccurate details.
• Request deletion of data that we are not legally required to keep.
• Object to certain processing activities or withdraw consent.

Data security

We apply layered security controls including encrypted transport (HTTPS), managed cloud infrastructure, principle-of-least-privilege access, and periodic reviews of third-party vendors. Breach notifications will be issued without undue delay in line with applicable law.

International data transfers

We operate globally with infrastructure hosted in jurisdictions such as the EU and USA. Where data leaves Kenya or your home region, we rely on contractual safeguards and industry-standard security measures.

Contact

Questions or requests? Email [email protected].

Updates

We may update this policy to reflect operational or regulatory changes. The "Last updated" date will be revised accordingly, and significant updates will be highlighted on this page.