Privacy Policy
Last Updated: March 19, 2026 | Effective Date: January 1, 2026
Clouds Technologies ("we," "us," or "our") operates the website cloudstechnologies.co.ke. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website or engage our services. This policy is written in compliance with the Kenya Data Protection Act, 2019 (DPA 2019).
By using our website or services, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.
1. Information We Collect
We collect the following categories of personal information:
- Contact Information: Name, email address, phone number, and physical address when you fill in our contact form or place an order.
- Communication Data: Messages, enquiries, and correspondence you send us via our contact form, WhatsApp, Telegram, or email.
- Usage Data: Information about how you access and use our website, including your IP address, browser type, pages visited, time spent on pages, and referring URLs. This data is collected automatically via Google Analytics.
- Cookies: We use session and persistent cookies to improve your browsing experience. See Section 7 for details.
- Transaction Data: For product orders through Clouds Mall, we collect details of products purchased and payment reference numbers (we do not store full card or M-Pesa PIN information).
2. How We Use Your Information
We use the personal data we collect for the following purposes:
- To respond to your enquiries and provide the services you request.
- To process orders placed through Clouds Mall and arrange delivery.
- To send you service updates, invoices, and support communications related to your purchase or engagement.
- To improve our website, services, and marketing based on aggregated usage analytics.
- To comply with our legal obligations under the Kenya Data Protection Act 2019 and other applicable laws.
- To prevent fraud, unauthorized access, and other illegal activities.
We will never sell your personal data to third parties. We will never use your data for purposes incompatible with those listed above without first obtaining your explicit consent.
3. Legal Basis for Processing
Under the Kenya Data Protection Act 2019, we process your personal data based on the following legal grounds:
- Consent: When you submit our contact form or opt in to marketing communications.
- Contractual Necessity: When processing is necessary to fulfil a service or product order you have placed with us.
- Legitimate Interests: For website analytics and improving our services.
- Legal Obligation: When required by Kenyan law or a lawful court order.
4. Google AdSense and Advertising
Our website uses Google AdSense to display third-party advertisements. Google uses cookies (including the DART cookie) to serve ads based on your prior visits to our website and other websites on the internet. You can opt out of personalized advertising by visiting Google's Ads Settings.
Google AdSense partners may collect data through cookies and web beacons to measure the effectiveness of advertising. Google's use of advertising cookies is governed by Google's own Privacy Policy, available at policies.google.com/privacy.
5. Third-Party Services
We use the following trusted third-party services, each governed by their own privacy policies:
- Google Analytics – Website usage analytics. Data is anonymized where possible.
- Google AdSense – Advertising platform. Uses cookies to display relevant ads.
- Formspree – Processes contact form submissions and sends them securely to our email.
- WhatsApp / Telegram – Communication platforms if you contact us directly via these channels.
We share your data with these third parties only to the extent necessary to provide our services and only with reputable, compliant providers.
6. Data Retention
We retain your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Specifically:
- Contact form submissions and correspondence are retained for a maximum of 2 years for service and legal purposes.
- Transaction data is retained for 7 years in compliance with the Kenya Revenue Authority requirements.
- Website analytics data (Google Analytics) is retained for 26 months, after which it is automatically deleted.
After the applicable retention period, data is permanently and securely deleted or anonymized.
7. Cookies Policy
Our website uses cookies — small text files stored on your device — to enhance your browsing experience. Categories of cookies we use:
- Essential Cookies: Necessary for the website to function. Cannot be disabled.
- Analytics Cookies: Google Analytics cookies help us understand how visitors use our site (e.g., which pages are most popular). These are anonymous.
- Advertising Cookies: Google AdSense uses cookies to serve relevant advertisements.
You can control or delete cookies through your browser settings. Note that disabling certain cookies may affect your experience on our website.
8. Your Rights Under the Kenya DPA 2019
Under the Kenya Data Protection Act 2019, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements.
- Right to Object: You can object to processing of your data for direct marketing or profiling.
- Right to Data Portability: You can request your data in a machine-readable format for transfer to another service provider.
- Right to Withdraw Consent: You can withdraw consent for data processing at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at cloudstechnologies.org.gmail.com or via WhatsApp at +254 114 710 035. We will respond to your request within 21 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or disclosure. These measures include HTTPS encryption for all data transmitted to and from our website, access controls limiting who can view personal data within our organization, and regular security reviews of our systems and practices.
Despite our best efforts, no method of internet transmission or electronic storage is 100% secure. If you believe your data has been compromised, please contact us immediately.
10. Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection Officer:
- Email: cloudstechnologies.org.gmail.com
- WhatsApp: +254 114 710 035
- Telegram: @cloudstechnology
- Business Hours: Monday – Friday, 08:00 – 18:00 EAT
- Location: Nairobi, Kenya