Privacy Policy
Last updated: August 10, 2026
01. Introduction and Data Controller
This Privacy Policy explains how Orvexus ("we", "us", "our"), registered at Loita Street 44, Nairobi 00100, Kenya, collects, uses and protects personal data of visitors to this website and users of our services. Orvexus is the data controller for the purposes of Kenya's Data Protection Act, 2019. Questions about this policy can be directed to [email protected].
02. What Data We Collect
We collect data you provide directly through our contact form (name, email, phone, message) and, where you consent, non-essential data recorded through cookies covering analytics and personalisation. Essential cookies required for the site to function are used regardless of consent.
03. Purposes and Legal Basis
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact form details | Responding to enquiries, arranging sessions | Consent / contract preparation |
| Analytics cookies | Understanding site usage | Consent |
| Essential cookies | Core site functionality and security | Legitimate interest |
04. Data Sharing and Third Parties
We do not sell personal data. Data submitted through our contact form is used solely by Orvexus to respond to your enquiry and is not shared with third parties except where required by Kenyan law.
05. Retention
Enquiry data is retained only as long as needed to respond to your message and, where a session is arranged, for the duration of that engagement plus a reasonable period for record-keeping purposes.
06. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, consistent with the standards expected under the Data Protection Act, 2019.
07. International Transfers
We do not routinely transfer personal data outside Kenya. Should this change, any transfer would be conducted in accordance with the safeguards required under the Data Protection Act, 2019.
08. Your Rights
Under the Data Protection Act, 2019, and subject to the oversight of the Office of the Data Protection Commissioner, you have the right to access, correct, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the Commissioner. To exercise these rights, contact us via the contact page.
09. Opt-out and Data Deletion
Providing personal data to us is always optional; declining to share it may simply mean we are unable to respond to a specific enquiry. Non-essential cookies can be declined or adjusted at any time through the Cookie Settings link in the footer. To request deletion of data we hold about you, please get in touch via our contact page.