Skip to content
Home Privacy policy

Privacy policy

How we collect, use and protect your personal data under the Data Protection Act, 2019.

Last updated: November 2026

Sahihi Media ("we", "us", "our") respects your privacy. This policy explains what personal data we collect through sahihimedia.co.ke, why we collect it, how we protect it and the rights you have under the Data Protection Act, 2019 of Kenya and the Data Protection (General) Regulations, 2021.

1. Who is responsible for your data

Sahihi Media is the data controller for the personal data described here. You can reach us at info@sahihimedia.co.ke or on +254 746 494 615. Questions about your data can be sent to the same address, marked "Data protection".

2. Personal data we collect

  • Enquiries and quotes: name, email address, phone number (optional), the service you are interested in and your message.
  • Newsletter: email address, first name and gender (both optional) and which list you joined (General or Exclusive).
  • Technical data: IP address, browser type and the pages you read, used for security, spam protection and basic statistics (for example, how many people read a blog article).
  • Cookies: small files that keep the site working (such as your session and security token). If we enable analytics, we ask for your consent first where the law requires it.

We do not knowingly collect personal data from children under 18. We do not collect sensitive personal data (such as health, religion or biometric data) through this website.

3. Why we use it and our lawful basis

  • To reply to your enquiry and prepare a quote: steps taken at your request before entering a contract.
  • To send our newsletter and updates: your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
  • To keep the site secure, prevent spam and fraud, and understand which content is useful: our legitimate interests, balanced against your rights.
  • To meet legal or tax obligations: legal obligation.

We do not sell your personal data and we do not use it for automated decisions that significantly affect you.

4. Who we share it with

Only with service providers who help us run the website and communicate with you (for example web hosting, email delivery and analytics), under written terms that require them to protect the data and use it only on our instructions. We may also disclose data when the law, a court or a regulator requires us to.

5. Transfers outside Kenya

Some providers may process data on servers outside Kenya. Where that happens we make sure the transfer meets sections 48 and 49 of the Data Protection Act, 2019, for example by using providers that offer appropriate safeguards or by asking for your consent.

6. How long we keep it

Enquiries are kept for up to 24 months after our last contact, unless you become a client, in which case records are kept for the period required for accounting and tax purposes. Newsletter details are kept until you unsubscribe. Technical logs are kept for up to 12 months.

7. How we protect it

We use HTTPS, hashed passwords, access controls for the admin area, spam protection and regular backups. No system is perfectly secure, but if a breach is likely to harm you we will notify you and the Office of the Data Protection Commissioner within the time the law requires (72 hours for the Commissioner).

8. Your rights

Under section 26 of the Data Protection Act, 2019 you have the right to:

  • be informed about how your data is used;
  • access the personal data we hold about you;
  • object to the processing of your data, including for direct marketing;
  • have inaccurate data corrected;
  • have data deleted when we no longer need it or you withdraw consent;
  • receive your data in a commonly used format (data portability).

To use any of these rights email info@sahihimedia.co.ke. We will respond within the time set by law (normally within 30 days) and may ask you to confirm your identity first.

9. Complaints

If you are not happy with how we handle your data, please contact us first. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC), Kenya: www.odpc.go.ke.

10. Third-party links

Our website links to other sites (for example client websites and social networks). We do not control them and are not responsible for their privacy practices.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.