Privacy Policy

1. Who We Are

Isolutions Associates Ltd ("ISOLS", "we", "us", "our") is a cybersecurity and ICT solutions company incorporated in Kenya, with offices across East Africa. Our registered address is Mirage Towers, Tower 2, 3rd Floor, Westlands, Nairobi, Kenya.

We are committed to protecting your privacy and processing your personal data lawfully, fairly, and transparently in accordance with the Kenya Data Protection Act, 2019 (DPA 2019) and any other applicable data protection legislation.

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity data: first name, last name, job title, company name
• Contact data: email address, telephone number, physical address
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system
• Usage data: information about how you use our website and services
• Marketing preferences: your preferences in receiving marketing communications from us
• Career data: CV, employment history, certifications, and other information you voluntarily submit through our careers form

3. How We Collect Your Data

We collect personal data through:

• Direct interactions: when you fill in forms on our website, contact us by email or telephone, or submit a job application
• Automated technologies: we may automatically collect technical data about your equipment and browsing actions using cookies and similar technologies
• Third parties: we may receive personal data about you from analytics providers and advertising networks

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide you with information about our services
• To process job applications and assess your suitability for employment
• To send you marketing communications where you have consented or where we have a legitimate interest
• To improve our website and services
• To comply with legal and regulatory obligations

5. Legal Basis for Processing

We process your personal data on the following legal grounds under the DPA 2019:

• Consent: where you have given clear, informed consent to processing
• Contract: where processing is necessary to perform a contract with you
• Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights
• Legal obligation: where processing is necessary to comply with a legal obligation

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers acting as data processors who provide IT, system administration, and email delivery services
• Professional advisers including lawyers and auditors
• Regulators and authorities where required by law

All third-party service providers are required to process your data in accordance with applicable data protection law and our instructions.

7. International Transfers

Some of our service providers are based outside Kenya. Where we transfer personal data outside Kenya, we ensure appropriate safeguards are in place in accordance with DPA 2019 requirements.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements:

• Enquiry/contact data: 3 years from last contact
• Job application data: 12 months from the date of application (unless a longer retention period is required)
• Client data: 7 years after the end of the client relationship (for legal compliance purposes)

9. Your Rights

Under the DPA 2019, you have the following rights:

• Right of access: to request a copy of your personal data
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your personal data in certain circumstances
• Right to restrict processing: to request that we limit the way we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@isols.io. We will respond within 30 days.

10. Cookies

Our website uses essential cookies to ensure the site functions correctly. We do not currently use tracking or advertising cookies. You can control cookie settings through your browser settings.

11. Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. As a cybersecurity firm, data security is central to everything we do. However, no internet transmission is completely secure and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by the "last updated" date above. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this privacy policy or our data protection practices, please contact:

• Data Protection Officer: Isolutions Associates Ltd
• Email: privacy@isols.io
• Post: Mirage Towers, Tower 2, 3rd Floor, Westlands, Nairobi, Kenya

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.