1. Introduction
NeuraCreations ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or engage with us in any way.
We comply with the Kenya Data Protection Act, 2019 (KDPA) and other applicable data protection laws. By using our services or providing us with your personal data, you consent to the practices described in this policy.
NeuraCreations is a software development company based in Nairobi, Kenya. For any questions about this policy or our data practices, please contact us at info@neuracreations.com.
2. Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, company name, and job title when you fill out contact forms, request quotes, or communicate with us.
- Project Information: Details about your project requirements, business needs, and technical specifications when discussing potential work.
- Account Information: Login credentials if you have an account with us for project management or support purposes.
- Payment Information: Billing details for invoicing purposes (we do not store complete payment card details).
- Communication Records: Emails, messages, and other correspondence with our team.
2.2 Information Collected Automatically
When you visit our website, we automatically collect certain information, including:
- Device Information: Browser type, operating system, device type, and screen resolution.
- Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths.
- Location Data: General geographic location based on IP address.
- Referral Information: How you arrived at our website (search engine, social media, direct, etc.).
2.3 Information from Third Parties
We may receive information about you from:
- Business partners and referral sources
- Social media platforms when you interact with our profiles
- Analytics providers and advertising networks
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Service Delivery
- To respond to your inquiries and provide quotes
- To deliver software development and related services
- To communicate about project progress and updates
- To provide technical support and maintenance
- To process payments and manage billing
3.2 Business Operations
- To improve our website and services
- To analyze usage patterns and trends
- To develop new features and services
- To protect against fraud and security threats
3.3 Marketing and Communications
- To send newsletters and updates (with your consent)
- To share information about services that may interest you
- To invite you to events or webinars
You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
4. Legal Basis for Processing
Under the Kenya Data Protection Act, 2019, we process your personal data based on the following legal grounds:
- Consent: When you have given clear consent for us to process your personal data for specific purposes.
- Contract Performance: When processing is necessary to fulfill our contractual obligations to you or to take steps at your request before entering a contract.
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms.
- Legal Obligations: When we need to comply with legal or regulatory requirements.
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
5.1 Service Providers
Third-party vendors who assist us in operating our business, including:
- Cloud hosting providers (for data storage and processing)
- Email service providers (for communications)
- Analytics providers (for website analytics)
- Payment processors (for billing)
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
5.2 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Enforce our terms of service
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change and any choices you may have regarding your information.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (HTTPS/TLS)
- Secure access controls and authentication
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure: You can request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: You can request that we limit how we use your data.
- Right to Data Portability: You can request your data in a structured, commonly used format.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at info@neuracreations.com. We will respond to your request within 30 days.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
9. International Data Transfers
Your personal data may be transferred to and processed in countries other than Kenya where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by relevant authorities
- Transfers to countries with adequate data protection laws
- Binding corporate rules where applicable
10. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Client project data: For the duration of our business relationship and for 7 years afterward for legal and tax purposes.
- Contact inquiries: For 2 years from the date of inquiry if no business relationship is established.
- Marketing data: Until you withdraw consent or unsubscribe.
- Website analytics: For 26 months.
After the retention period, we securely delete or anonymize your data.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:
- We will update the "Last Updated" date at the top of this policy.
- For significant changes, we may notify you via email or a prominent notice on our website.
- We encourage you to review this policy periodically.
Your continued use of our services after any changes indicates your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all inquiries within 5 business days. For data protection requests (access, deletion, etc.), we will respond within 30 days as required by law.