Privacy Policy
Last updated: 10 August 2026
1. Introduction and Data Controller
This Privacy Policy explains how Envaris ("we", "us", "our"), the data controller responsible for this website, collects, uses and protects personal information. Envaris is registered at Kenyatta Avenue 92, Kitale 30200, Kenya. For any questions about this policy, contact us at [email protected]. This policy is written to comply with Kenya's Data Protection Act, 2019, and is overseen by the Office of the Data Protection Commissioner (ODPC).
2. What Data We Collect
We collect information you provide directly through our contact form, including your name, email address, phone number and any message content. We also use cookies to operate the site and, where you consent, to understand how it is used. See our Cookie Policy for details on the categories involved.
3. Purposes and Legal Basis
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact form details | Responding to enquiries about our services | Consent / legitimate interest |
| Optional cookie data | Understanding site usage | Consent |
| Essential cookie data | Running the site securely | Legitimate interest |
4. Data Sharing and Third Parties
We do not sell personal data. We do not share the information you submit with third parties except where required by law or where a trusted service provider assists us in operating the site under a duty of confidentiality.
5. Retention
We retain contact form submissions only for as long as necessary to respond to your enquiry and maintain a reasonable record of correspondence, typically no longer than 24 months, unless a longer period is required by law.
6. Security
We take reasonable technical and organisational measures to protect the personal data we hold against unauthorised access, loss or misuse.
7. International Transfers
Where any data is processed outside Kenya by a service provider, we take steps to ensure it receives a comparable level of protection, as required under the Data Protection Act, 2019.
8. Your Rights
Under the Data Protection Act, 2019, you have the right to access, correct, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these rights, contact us at [email protected].
9. Opt-Out and Data Deletion
Providing your personal data through our contact form is entirely optional. You may decline optional cookies at any time through the cookie preferences panel. If you would like any data we hold about you deleted, please reach out via our contact page and we will act on your request promptly.