Privacy Policy

Who is responsible for your data

This site is owned and operated by David Waweru Ngari (theeWaweru), a designer and developer based in Nairobi, Kenya. For the purposes of the Data Protection Act, 2019, David Waweru Ngari is the data controller. If you have any question about this policy or your data, you can reach me at davidngari47@gmail.com.

Information I collect

I only collect what is needed to run the site and respond to you:

• Contact form. When you send a message, I collect your name, email address, the inquiry type, the subject, your message, and (optionally) how you heard about me. This is stored securely so I can read and reply to your enquiry.
• Newsletter. If you subscribe, I store your email address so I can send occasional updates. You can unsubscribe at any time.
• Analytics. I use Google Analytics to understand how the site is used. This collects information such as pages visited, time on page, approximate location (derived from your IP address), device and browser type, and referral source. This data is aggregated and is not used to personally identify you.
• Spam protection. The contact form uses Google reCAPTCHA to prevent abuse. Google may collect hardware, software and interaction information to tell humans from bots, as described in Google's own policy.
• Technical data. Like most websites, my hosting provider automatically logs basic technical information (such as IP address and browser details) for security and reliability.

How I use your information

• To respond to your messages and enquiries.
• To send newsletter updates, only if you have subscribed.
• To understand and improve how the site performs.
• To protect the site from spam and abuse.

I do not sell your personal data, and I do not share it for advertising.

Legal basis for processing

Where the law requires a legal basis, I rely on your consent (for example, when you submit the contact form or subscribe to the newsletter), and on my legitimate interest in keeping the site secure and understanding how it is used. You may withdraw your consent at any time.

Cookies and analytics

The site uses cookies set by Google Analytics to measure usage. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics across all sites using Google's browser add-on at tools.google.com/dlpage/gaoptout. Blocking cookies will not stop you from using the site.

Third parties I rely on

I use a small set of trusted providers to run the site. Each processes data under its own privacy terms:

• Google Analytics and reCAPTCHA (usage measurement and spam protection).
• Supabase (secure database that stores contact messages and newsletter emails).
• Vercel (website hosting and server logs).

International data transfers

Some of these providers store or process data on servers outside Kenya. Where that happens, the transfer is covered by the provider's own safeguards and privacy commitments. By using the site you understand that your data may be processed in other countries.

How long I keep your data

I keep contact messages for as long as needed to handle your enquiry and any follow up, then remove them when they are no longer needed. Newsletter emails are kept until you unsubscribe. Analytics data is retained according to Google Analytics' standard retention settings. You can ask me to delete your data sooner at any time.

Your rights

Under Kenya's Data Protection Act, 2019, you have the right to be informed about how your data is used, to access the data I hold about you, to ask for corrections, to request deletion, to object to certain processing, and to withdraw consent. Visitors from other regions, including those covered by the GDPR, have equivalent rights, including access, rectification, erasure, portability and objection.

To exercise any of these rights, email davidngari47@gmail.com and I will respond within a reasonable time. If you are in Kenya and you believe your data has been mishandled, you may also lodge a complaint with the Office of the Data Protection Commissioner at odpc.go.ke.

Children

This site is not directed at children under the age of 18, and I do not knowingly collect data from them.

Security

I take reasonable steps to protect your data, including using reputable providers and secure connections. No method of transmission over the internet is completely secure, but I work to keep your information safe.

Changes to this policy

I may update this policy from time to time. When I do, I will revise the date at the top of this page. Please check back occasionally to stay informed.