Your Privacy Matters

Fymate Creation ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, in compliance with the Kenya Data Protection Act 2019 (KDPA) and the Data Protection Regulations, 2021.

Under the Kenya Data Protection Act 2019, we process your personal data based on the following lawful bases:

• <strong>Consent:</strong> You have given clear and informed consent for us to process your personal data for specific purposes
• <strong>Contract:</strong> Processing is necessary for the performance of a contract to which you are a party
• <strong>Legitimate Interest:</strong> Processing is necessary for our legitimate business interests, provided it does not override your rights and freedoms
• <strong>Legal Obligation:</strong> Processing is necessary for compliance with legal obligations under Kenyan law

We use your personal data for the following purposes:

• Providing and improving our web development and digital services
• Communicating with you about our services, projects, and inquiries
• Processing consultation requests and bookings
• Managing your account and authentication
• Sending you marketing communications (with your consent)
• Analyzing website usage to improve user experience
• Complying with legal and regulatory requirements

We may share your personal data in the following circumstances:

• <strong>Service Providers:</strong> With trusted third-party service providers who assist us in operating our business (e.g., hosting, analytics, email services)
• <strong>Business Transfers:</strong> In connection with a merger, acquisition, or sale of assets
• <strong>Legal Requirements:</strong> When required by law, court order, or regulatory authority
• <strong>Protection of Rights:</strong> To protect our rights, property, or safety, or that of our users

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Data backup and disaster recovery procedures

We retain your personal data only for as long as necessary for the purposes for which it was collected, unless required by law to retain it longer. Retention periods vary based on the type of data and purpose:

• <strong>Account Data:</strong> Retained while your account is active and for a reasonable period after account closure
• <strong>Communication Data:</strong> Retained for business purposes and legal compliance (typically 3-7 years)
• <strong>Analytics Data:</strong> Retained for performance analysis (typically 2 years)

Under the Kenya Data Protection Act 2019, you have the following rights:

• <strong>Right to Access:</strong> Request access to your personal data we hold
• <strong>Right to Correction:</strong> Request correction of inaccurate or incomplete data
• <strong>Right to Erasure:</strong> Request deletion of your personal data (right to be forgotten)
• <strong>Right to Restrict Processing:</strong> Request restriction of processing of your data
• <strong>Right to Data Portability:</strong> Request transfer of your data to another controller
• <strong>Right to Object:</strong> Object to processing based on legitimate interest
• <strong>Right to Withdraw Consent:</strong> Withdraw consent at any time (where processing is based on consent)

To exercise these rights, please contact us at the details provided below.

We use cookies and similar tracking technologies to collect information about your browsing behavior. Our Cookie Policy provides detailed information about the types of cookies we use and how you can manage them.

Your personal data may be transferred to and processed in countries other than Kenya. We ensure that such transfers comply with the Kenya Data Protection Act 2019 and include appropriate safeguards to protect your data.

Our services are not intended for individuals under the age of 18 ("Children"). We do not knowingly collect personal data from Children. If we become aware that we have collected personal data from a Child without parental consent, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya: